r20.rs6.net/tn.jsp?f=001MFb26txk9-Lj39UCld4i1vmSpUDAV4BeciCm9YTBMHlWkxWLnN2-3wJ5MZaNklgF5zfVb_o_9L640GaFlRsOVmfbX1LLt024KorLhKmMPE-O-1p68bG0014CA6Gz-W_E8j4X4IzGCarK2Fpy3cmUmNtyaAvOnOnq&c=&ch==&__=/asdf/ZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29t
0 B URL r20.rs6.net/tn.jsp?f=001MFb26txk9-Lj39UCld4i1vmSpUDAV4BeciCm9YTBMHlWkxWLnN2-3wJ5MZaNklgF5zfVb_o_9L640GaFlRsOVmfbX1LLt024KorLhKmMPE-O-1p68bG0014CA6Gz-W_E8j4X4IzGCarK2Fpy3cmUmNtyaAvOnOnq&c=&ch==&__=/asdf/ZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29t
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tn.jsp?f=001MFb26txk9-Lj39UCld4i1vmSpUDAV4BeciCm9YTBMHlWkxWLnN2-3wJ5MZaNklgF5zfVb_o_9L640GaFlRsOVmfbX1LLt024KorLhKmMPE-O-1p68bG0014CA6Gz-W_E8j4X4IzGCarK2Fpy3cmUmNtyaAvOnOnq&c=&ch==&__=/asdf/ZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29t HTTP/1.1
Host: r20.rs6.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Tue, 29 Aug 2023 16:52:06 GMT
Server: Apache
P3P: CP="CAO DSP TAIa OUR NOR UNI"
Location: https://denverradio.net/console/asdf/ZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29t
Content-Length: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate, no-cache="Set-Cookie"
Pragma: no-cache
Connection: close
Content-Type: text/html;charset=ISO-8859-1
denverradio.net/console/asdf/ZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29t
0 B URL denverradio.net/console/asdf/ZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29t
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /console/asdf/ZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29t HTTP/1.1
Host: denverradio.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
refresh: 0;url=https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev?qrc=dimitri.kardamanidis@ardaghgroup.com
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 29 Aug 2023 16:52:06 GMT
server: Apache
X-Firefox-Spdy: h2
01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/?qrc=dimitri.kardamanidis@ardaghgroup.com
200 OK 0 B URL User Request GET HTTP/2 01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/?qrc=dimitri.kardamanidis@ardaghgroup.com
IP
Certificate IssuerGoogle Trust Services LLC
Subjectc1a9ed330cc99af178dfc013.workers.dev
FingerprintC2:D5:CD:F4:16:0A:AE:98:BB:66:45:78:A1:88:03:36:21:46:FE:D2
ValidityMon, 14 Aug 2023 22:55:41 GMT - Sun, 12 Nov 2023 22:55:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?qrc=dimitri.kardamanidis@ardaghgroup.com HTTP/1.1
Host: 01aed1c7.c1a9ed330cc99af178dfc013.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 603
Origin: https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/?qrc=dimitri.kardamanidis@ardaghgroup.com
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Tue, 29 Aug 2023 16:52:12 GMT
content-length: 0
location: https://sultaniselbiseleri.com?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3N1bHRhbmlzZWxiaXNlbGVyaS5jb20iLCJkb21haW4iOiJzdWx0YW5pc2VsYmlzZWxlcmkuY29tIiwia2V5IjoiMzdnMFpjMFA2UEh1IiwicXJjIjoiZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29tIiwiaWF0IjoxNjkzMzI3OTMyLCJleHAiOjE2OTMzMjgwNTJ9.6B6uQ-lJirkkfqrbSDhZM9n4AKwYfLhjjUrp6pvBxoA
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r7T4QI4eb6w%2B6zW1FudvSIj2nUMKnaoSu2TDT3D8GhlUETukeig%2Fl8RSP2MoMBMU8CywooVKGOIeeerpukuX1V2tOsCOKFfJzLR9qBMJL%2BdPDe7eu97MFdWzPTUFdcrrY45OM162twJyhbrTAlxL2m9eTtlr22jdxYoHcjkkjUw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fe64d93fe6bb50f-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/7fe64d7c1f34b517/1693327928077/lxMkx2LH1BRCW4c
200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/7fe64d7c1f34b517/1693327928077/lxMkx2LH1BRCW4c
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 29 x 24, 8-bit/color RGB, non-interlaced\012- data
Hash 6c3e1252c5a4748801cdf8fc6b04eff7
60863329034fbab5d2db7de7117280f855d1c313
48d3325fd68a61daf7d260d6817290d4a58a6f56c13d5831bd1a75652ed9a015
GET /cdn-cgi/challenge-platform/h/b/i/7fe64d7c1f34b517/1693327928077/lxMkx2LH1BRCW4c HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Aug 2023 16:52:08 GMT
content-type: image/png
server: cloudflare
cf-ray: 7fe64d8209c2b517-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/7fe64d7c1f34b517/1693327928081/533535e86ee7b16585ab24b0548d64a98c44ce8e77e58bf9c22def52e21fe617/lefBuVhSKt8DT8T
401 Unauthorized 23 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/7fe64d7c1f34b517/1693327928081/533535e86ee7b16585ab24b0548d64a98c44ce8e77e58bf9c22def52e21fe617/lefBuVhSKt8DT8T
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hash 65e1ef61db4c4c26a22e79c43b121f45
781b7bd369d19e2774c311b8be977801a4b7d09a
0c3f53c4b89720d6a79af2cd8d5225fdd7dcabad7acf53c54c1cfd9fb26708cf
GET /cdn-cgi/challenge-platform/h/b/pat/7fe64d7c1f34b517/1693327928081/533535e86ee7b16585ab24b0548d64a98c44ce8e77e58bf9c22def52e21fe617/lefBuVhSKt8DT8T HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Tue, 29 Aug 2023 16:52:11 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gUzU16G7nsWWFqySwVI1kqYxEzo535Yv5wi3vUuIf5hcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAubOcoOBrr9fuRmfOIN88oLf5DWJ-Kf7SYvYKOhTPRuwObMOSsgyqAb4skMUBqCVN88HoYR_nt0QPDKWwJVyKA3tbmhfZZlvT3jJGSfrj8rHSJRKXSPiNk6AxZ_SD2IA8l5Ed7cRzNo_O44VBMwo-o3i0QYT5xzi4g8kPnGg4nwiaceoVk8g4PUUTAZOX4pKFjG4zIzVX2IkGtTyHm2gvoPIGEFugVWNUVfQyMRbnST7_5m9NW_gScfWf4--1U5EpIo9Oz-y1BsW5LDhCZ3AfRmB3y7O4aofDW6FM2G_90xj4h_pxLY4Zy2IyKUrLoq_rc9y55HnliRYkuN3KoEoynwIDAQAB, max-age=20
server: cloudflare
cf-ray: 7fe64d91fe0bb517-OSL
alt-svc: h3=":443"; ma=86400
sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
200 OK 706 kB URL User Request GET HTTP/1.1 sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
IP
ASN #43624 Pq Hosting S.r.l.
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type gzip compressed data, from Unix\012- data
Size 706 kB (705678 bytes)
Hash b05066ef0354aecc6a138b6b9d5e12da
ed1549d104354323d43fcb826685433fcf15f616
a26ed9220ccc69a59fd148d173aafe321232a1d131c153c37f1d46e4a3dc76c0
GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: d8afc518-b906-452c-85f5-a3fbdc418600
x-ms-ests-server: 2.1.16150.3 - SCUS ProdSlices
x-ms-clitelem: 1,0,0,,
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; expires=Thu, 28-Sep-2023 16:52:13 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; domain=sultaniselbiseleri.com; path=/; secure; HttpOnly; SameSite=None
fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; expires=Thu, 28-Sep-2023 16:52:13 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 29 Aug 2023 16:52:12 GMT
Connection: close
content-length: 44752
Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
200 OK 17 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data
Hash 12e3dac858061d088023b2bd48e2fa96
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:15 GMT
Content-Type: image/x-icon
Content-Length: 17174
Connection: close
Cache-Control: public, max-age=31536000
Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT
ETag: 0x8D8731230C851A6
x-ms-request-id: 0892807a-601e-0051-22ac-d47f42000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165215Z-f5qx7anva95bfed8h7rbcusrpg0000000130000000016ce4
X-Cache: TCP_HIT
Accept-Ranges: bytes
login.live.com/Me.htm?v=3
200 OK 1.1 kB URL GET HTTP/1.1 login.live.com/Me.htm?v=3
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerDigiCert Inc
Subjectlogin.live.com
Fingerprint2F:2A:1D:C4:84:83:6B:36:13:1C:9E:F8:36:96:78:10:4E:0B:27:53
ValiditySun, 02 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Hash e86ef8b6111e5fb1d1665bcdc90888c9
994bf7651cb967cd9053056af2d69acb74db7f29
3410242720de50b090d07a23aee2dad879b31d36f2615732962ec4cfa8a9d458
GET /Me.htm?v=3 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=315360000
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Fri, 26 Aug 2033 16:52:16 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C105_BL2
x-ms-request-id: c0382321-814f-4cc2-9b60-e693caee0aa0
PPServer: PPV: 30 H: BL6PPF5F1D70294 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=99c7d99448e14b4a989685c69242443c; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=N<=1693327936&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Tue, 29 Aug 2023 16:52:15 GMT
Content-Length: 1132
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
200 OK 3.6 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type GIF image data, version 89a, 352 x 3\012- data
Hash b540a8e518037192e32c4fe58bf2dbab
3047c1db97b86f6981e0ad2f96af40cdf43511af
8737d721808655f37b333f08a90185699e7e8b9bdaaa15cdb63c8448b426f95d
GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; brcap=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:16 GMT
Content-Type: image/gif
Content-Length: 3620
Connection: close
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT
ETag: 0x8D79B8373B17F89
x-ms-request-id: aa2ad0e9-401e-0017-174d-d7565f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165216Z-80r859sx2h2z12a8y68fu8k81s000000013g000000002g2y
X-Cache: TCP_HIT
Accept-Ranges: bytes
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
200 OK 2.7 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type GIF image data, version 89a, 352 x 3\012- data
Hash 166de53471265253ab3a456defe6da23
17c6df4d7ccf1fa2c9efd716fbae0fc2c71c8d6d
a46201581a7c7c667fd42787cd1e9adf2f6bf809efb7596e61a03e8dba9ada13
GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; brcap=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:17 GMT
Content-Type: image/gif
Content-Length: 2672
Connection: close
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT
ETag: 0x8D79B83739984DD
x-ms-request-id: 62eab08f-401e-0053-5c9e-d72946000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165217Z-ax9yq7x3dp3qp88dp8am3mnyzc0000000130000000000bqy
X-Cache: TCP_HIT
Accept-Ranges: bytes
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js
200 OK 100 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c468595806373ab1e37a40d696f7dd6a
79ff32d65cd066eee935fde1957835e5e59bf38a
b8cd3cf4fdc59b79b7ea1f398cde2367e70f6bf14564812c84081d7b1d1d4af1
GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:15 GMT
Content-Type: application/x-javascript
content-length: 190151
Connection: close
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Last-Modified: Thu, 27 Oct 2022 14:24:13 GMT
ETag: 0x8DAB826EBE74413
x-ms-request-id: 00dd7a95-401e-0053-0651-d72946000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165215Z-qhrfrcp8pd6nz13md2mrt5cqr40000000160000000001gep
X-Cache: TCP_HIT
Accept-Ranges: bytes
Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
autologon.microsoftazuread-sso.com/ardaghgroup.com/winauth/iframe?client-request-id=3747f868-422f-493b-bcc8-425f05580d9e&isAdalRequest=False
200 OK 7.2 kB URL GET HTTP/1.1 autologon.microsoftazuread-sso.com/ardaghgroup.com/winauth/iframe?client-request-id=3747f868-422f-493b-bcc8-425f05580d9e&isAdalRequest=False
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerDigiCert Inc
Subjectautologon.microsoftazuread-sso.com
Fingerprint70:80:FF:3C:33:24:96:1A:90:D1:91:22:02:DA:E1:A4:9E:00:33:8B
ValiditySun, 02 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2806), with CRLF, LF line terminators
Hash 5461a0a4959752f106a737b29100c999
78cf684d41aa52c26257830537e9959f24294aa4
4309539bca6f2f8fbeda28f839a13e1bddf426840c651ca071d3c8c8925c34ca
GET /ardaghgroup.com/winauth/iframe?client-request-id=3747f868-422f-493b-bcc8-425f05580d9e&isAdalRequest=False HTTP/1.1
Host: autologon.microsoftazuread-sso.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch
X-DNS-Prefetch-Control: on
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 369af377-82bf-4d5c-8bcf-95b730457e00
x-ms-ests-server: 2.1.16150.3 - EUS ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: fpc=AiyoezK-gAtCi-2Q1KsjwFQ; expires=Thu, 28-Sep-2023 16:52:17 GMT; path=/; secure; HttpOnly; SameSite=None
esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPrfGHOD63MGGi1kTibAd5A-vc6gTEn-CtI8j50jN7ROHc9xXOMPt1YTBzwcBNPDt1I0mZtH28V7VcImWWLSnLXd1ziimDoJk5wBmSsApqsx889xQO9bHjjAl-pqJLe7gPz1IeSfnBOI5McmKLo4nbvuE5fdTuu0OGbjhjvq5N0GQgAA; domain=.autologon.microsoftazuread-sso.com; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 29 Aug 2023 16:52:17 GMT
Content-Length: 7215
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
200 OK 1.4 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators
Hash ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a
GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; brcap=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:17 GMT
Content-Type: image/svg+xml
Content-Length: 1435
Connection: close
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT
ETag: 0x8D79B8373CB2849
x-ms-request-id: b7fcd54c-f01e-0014-55a7-d72b59000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165217Z-8rym1e0p6549705fxrxhmfkxzg00000000tg00000002kgmk
X-Cache: TCP_HIT
Accept-Ranges: bytes
sultaniselbiseleri.com/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js
200 OK 15 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type Unicode text, UTF-8 text, with very long lines (32058)
Hash 7f9a95f07c5ea8e2cde219940c77d6a4
a443b362f471570cc8b02bbc7127664c944f8193
077772bb095ad60b0d95fbcc318b1b06323564c3c7a4489045315d07c9b5550b
GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:13 GMT
Content-Type: application/x-javascript
content-length: 49972
Connection: close
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Last-Modified: Thu, 13 Jul 2023 00:28:45 GMT
ETag: 0x8DB83381EAF7708
x-ms-request-id: 167a777f-601e-0005-099d-d7b079000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165213Z-btkeya77g93595fvp11znuk2x000000000vg000000017afc
X-Cache: TCP_HIT
Accept-Ranges: bytes
Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
200 OK 40 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://autologon.microsoftazuread-sso.com/ardaghgroup.com/winauth/iframe?client-request-id=3747f868-422f-493b-bcc8-425f05580d9e&isAdalRequest=False
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint44:5F:75:46:1C:BE:AF:E4:F2:BF:F3:04:1D:0B:56:0F:EE:DA:A0:96
ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 29 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 75cf78d0e38c65a538ad253ca9e48dbe
bf0452e4a42a9af3b69d5d8c3a3a0433f14921b6
df2aa8537c1992c94846a0ffffaa9031d430d9d0210b9e396ec059aff62627e0
GET /ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://autologon.microsoftazuread-sso.com/
Origin: https://autologon.microsoftazuread-sso.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 40454
content-type: application/x-javascript
content-encoding: gzip
content-md5: HWW92uTq7vx3y5z+zFZbXQ==
last-modified: Fri, 26 Feb 2021 06:12:05 GMT
etag: 0x8D8DA1D70FBDD97
x-cache: TCP_HIT
x-ms-request-id: 7b9a1582-401e-0083-6967-d71d20000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0g87oZAAAAAARfm6fAB/aSq20VmvqtAq7QU1TMDRFREdFMTgyMgAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0QSLuZAAAAACPksI0rXkFT5554lWKBaMLU1ZHMjBFREdFMDUwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 29 Aug 2023 16:52:17 GMT
X-Firefox-Spdy: h2
aadcdn.msauth.net/ests/2.1/content/cdnbundles/dsso.iframe.min_ola-etxskuesqyfim_hgua2.js
200 OK 4.4 kB URL GET HTTP/2 aadcdn.msauth.net/ests/2.1/content/cdnbundles/dsso.iframe.min_ola-etxskuesqyfim_hgua2.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://autologon.microsoftazuread-sso.com/ardaghgroup.com/winauth/iframe?client-request-id=3747f868-422f-493b-bcc8-425f05580d9e&isAdalRequest=False
Certificate IssuerDigiCert Inc
Subjectaadcdn.msauth.net
Fingerprint44:5F:75:46:1C:BE:AF:E4:F2:BF:F3:04:1D:0B:56:0F:EE:DA:A0:96
ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 29 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (512)
Hash a0b03e1135d291412ca987c833f1c6b8
a109a65725eace4b02491e41810983d7edd835b3
1efb19fc32cd366f1169412e329d220a5d289ccff71f88284f8e810c60b4076b
GET /ests/2.1/content/cdnbundles/dsso.iframe.min_ola-etxskuesqyfim_hgua2.js HTTP/1.1
Host: aadcdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://autologon.microsoftazuread-sso.com/
Origin: https://autologon.microsoftazuread-sso.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-length: 4443
content-type: application/x-javascript
content-encoding: gzip
content-md5: cBuCMRolouOOxo7fU2fYKA==
last-modified: Thu, 22 Oct 2020 20:43:21 GMT
etag: 0x8D876CB1D444A03
x-cache: TCP_HIT
x-ms-request-id: 712595aa-101e-0062-143b-d02355000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref-originshield: 0HIveZAAAAAD3CmtN0aSSTb9sxPK9SAOpQU1TMDRFREdFMTgxNwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
x-azure-ref: 0QSLuZAAAAACtqQgkmPh6QKuzhbb3kfkYU1ZHMjBFREdFMDUwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=
date: Tue, 29 Aug 2023 16:52:17 GMT
X-Firefox-Spdy: h2
sultaniselbiseleri.com/common/instrumentation/dssostatus
200 OK 265 B URL POST HTTP/1.1 sultaniselbiseleri.com/common/instrumentation/dssostatus
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 81bfc8c573f6f0de0a51859a43209bca
2d121428e8197b7980baf4ed264269d40e007509
db7f30e954644e9305b1008f9cd7c1faaa44d7201e11da59104c06f32727342f
POST /common/instrumentation/dssostatus HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
hpgid: 1104
hpgact: 1800
canary: PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPHkocmDwNPsTQ7BTKAAvZ0spmQMHLjKHgPleBoPJM0a34urNkf2Mj8pfhnIvS2h8M1EuBJOpVfWlQf21O-wFggm9CvrMDaUJIqeOANQFCJVHx5PnpA1nCCVSxg-F-LpWWUnGR9k91YvgvS_pHMyTl1XzTK3LcFfjN5bY_oRMvejB5gy3rB31Cfm7Vmomf9IAT3YirXCtPRFbaZxDlUUW18SAA
client-request-id: 3747f868-422f-493b-bcc8-425f05580d9e
hpgrequestid: d8afc518-b906-452c-85f5-a3fbdc418600
Content-type: application/json; charset=utf-8
Content-Length: 192
Origin: https://sultaniselbiseleri.com
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; brcap=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: https://autologon.microsoftazuread-sso.com/
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST, OPTIONS
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
client-request-id: 3747f868-422f-493b-bcc8-425f05580d9e
x-ms-request-id: 27fa367a-155b-4101-9756-2d5accf58600
x-ms-ests-server: 2.1.16150.3 - NCUS ProdSlices
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; expires=Thu, 28-Sep-2023 16:52:18 GMT; path=/; secure; HttpOnly; SameSite=None
x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
Date: Tue, 29 Aug 2023 16:52:17 GMT
Connection: close
content-length: 265
Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
302 Found 30 kB URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
IP
Requested by https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/?qrc=dimitri.kardamanidis@ardaghgroup.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 29 Aug 2023 16:52:07 GMT
location: /turnstile/v0/b/be88c2a1/api.js?onload=onloadTurnstileCallback
cache-control: max-age=300, public
access-control-allow-origin: *
vary: accept-encoding
server: cloudflare
cf-ray: 7fe64d7b1c43b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2+U=
200 OK 61 B URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2+U=
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\012- data
Hash 9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1/9DKbiDfWH6ZjHxgSNTG3KHa3ucVmP6rj9MHN3bQn2+U= HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 16:52:07 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 7fe64d7cc860b517-OSL
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1895468629:1693325375:aTLCwdApnpkjTN2GxdlUBDOgYqZ6B3x92Mwg9yOGvaI/7fe64d7c1f34b517/aee669fc9d434ca
200 OK 83 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1895468629:1693325375:aTLCwdApnpkjTN2GxdlUBDOgYqZ6B3x92Mwg9yOGvaI/7fe64d7c1f34b517/aee669fc9d434ca
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c324fd3b47ba28e43babf79665149da6
3e299622cea9c17adb11130b8ad023aab030b949
794441b7f6559798d063b4b07d82033ae8ba41611aac4d670a58f208dfe5274e
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1895468629:1693325375:aTLCwdApnpkjTN2GxdlUBDOgYqZ6B3x92Mwg9yOGvaI/7fe64d7c1f34b517/aee669fc9d434ca HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: aee669fc9d434ca
Content-Length: 2407
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 16:52:08 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: JwfN/LcSDfWDWez0HkPAXItj48idpKM3oL62CB3A8NJjtcvo0zwgcV9ioG32i+Wr49CptutXeZ1mYz5vyyDFMB1zID2famWr610aSwcDHLZz9tXHg9nu8u+oHiv0aawacpvjzyxMtoIcdNVnV/P/dM3dcRcBPkhPA3Be10UOldw9sGU3Ajcxe9WjumW7Ip9dveXnPQdqFjElia4WhlFyvdkApC/S2BCNOsF+syNBF1eKQ5QP1t2ZCkhYD36MaX4ouNkTPVWkun7RY5gbmCH5thf/xK8OVlSclW5wWhbrslOfObcQSJR7LRNuzULiiS5QRTE3lyXdGaSMkvRr7ZCbMB4GVsV/5q11XMDl2m3TowwxN059bFZTvEDm5PLe6Fo3vDBukgkr9tH1c+fU93SjNA==$4LjWv798KvwVYObfQUYUeA==
server: cloudflare
cf-ray: 7fe64d7e6b59b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sultaniselbiseleri.com/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3N1bHRhbmlzZWxiaXNlbGVyaS5jb20iLCJkb21haW4iOiJzdWx0YW5pc2VsYmlzZWxlcmkuY29tIiwia2V5IjoiMzdnMFpjMFA2UEh1IiwicXJjIjoiZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29tIiwiaWF0IjoxNjkzMzI3OTMyLCJleHAiOjE2OTMzMjgwNTJ9.6B6uQ-lJirkkfqrbSDhZM9n4AKwYfLhjjUrp6pvBxoA
302 Found 45 kB URL User Request GET HTTP/1.1 sultaniselbiseleri.com/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3N1bHRhbmlzZWxiaXNlbGVyaS5jb20iLCJkb21haW4iOiJzdWx0YW5pc2VsYmlzZWxlcmkuY29tIiwia2V5IjoiMzdnMFpjMFA2UEh1IiwicXJjIjoiZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29tIiwiaWF0IjoxNjkzMzI3OTMyLCJleHAiOjE2OTMzMjgwNTJ9.6B6uQ-lJirkkfqrbSDhZM9n4AKwYfLhjjUrp6pvBxoA
IP
ASN #43624 Pq Hosting S.r.l.
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3N1bHRhbmlzZWxiaXNlbGVyaS5jb20iLCJkb21haW4iOiJzdWx0YW5pc2VsYmlzZWxlcmkuY29tIiwia2V5IjoiMzdnMFpjMFA2UEh1IiwicXJjIjoiZGltaXRyaS5rYXJkYW1hbmlkaXNAYXJkYWdoZ3JvdXAuY29tIiwiaWF0IjoxNjkzMzI3OTMyLCJleHAiOjE2OTMzMjgwNTJ9.6B6uQ-lJirkkfqrbSDhZM9n4AKwYfLhjjUrp6pvBxoA HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Set-Cookie: qPdM=37g0Zc0P6PHu; path=/; samesite=none; secure; httponly
qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; path=/; samesite=none; secure; httponly
location: /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Date: Tue, 29 Aug 2023 16:52:12 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
sultaniselbiseleri.com/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css
200 OK 111 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type ASCII text, with very long lines (61177)
Size 111 kB (111100 bytes)
Hash 5d2e2af849ea8c8cdbf8f77485aeb74b
e0239b7b40602a5c45680992e08bfbe780d937ad
09bcfd473f343f606206e638d6aa7c7436ab54f40fca8f3ea2247fc068147ffe
GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:13 GMT
Content-Type: text/css
Content-Length: 20105
Connection: close
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Last-Modified: Wed, 17 May 2023 19:54:03 GMT
ETag: 0x8DB5710770A6D5D
x-ms-request-id: e43790f8-001e-007b-3ca9-d4e064000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165213Z-sks9mxm9e919fa18xyhht2bvcw000000014000000000s40b
X-Cache: TCP_HIT
Accept-Ranges: bytes
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
200 OK 1.9 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1982), with no line terminators
Hash 4b5c228b4faba433d06ec569ed855b2d
a7d3882b93e332460e7c59510a6a811ef011983f
eb19d76cd1fad39abf0f2778991883a5cf9ff560117ce8f7c64124e71471b4ed
GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; brcap=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:17 GMT
Content-Type: image/svg+xml
Content-Length: 673
Connection: close
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT
ETag: 0x8D7B0071D86E386
x-ms-request-id: 466128f5-201e-0001-446b-d71c71000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165217Z-sks9mxm9e919fa18xyhht2bvcw000000011g00000001gewa
X-Cache: TCP_HIT
Accept-Ranges: bytes
challenges.cloudflare.com/turnstile/v0/b/be88c2a1/api.js?onload=onloadTurnstileCallback
200 OK 30 kB URL GET HTTP/3 challenges.cloudflare.com/turnstile/v0/b/be88c2a1/api.js?onload=onloadTurnstileCallback
IP
Requested by https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/?qrc=dimitri.kardamanidis@ardaghgroup.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (29684)
Hash 321c4f06ddad5749830573a903803db5
a3564508f8fbcb4e97e6af2c96bc09ded76b273c
92cefd873feda547496b569ec49cc16ea82c1c28959c46bc8b096b57afe04be7
GET /turnstile/v0/b/be88c2a1/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 16:52:07 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fe64d7b6d8eb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1895468629:1693325375:aTLCwdApnpkjTN2GxdlUBDOgYqZ6B3x92Mwg9yOGvaI/7fe64d7c1f34b517/aee669fc9d434ca
200 OK 3.5 kB URL POST HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1895468629:1693325375:aTLCwdApnpkjTN2GxdlUBDOgYqZ6B3x92Mwg9yOGvaI/7fe64d7c1f34b517/aee669fc9d434ca
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (3468), with no line terminators
Hash 0870bf98de8bb5a73adab0ae59d85165
b30bf34fbcf8f3e1349110f95e6517825198a839
04ac7993710e42b9d7ef19ffb81b27479380e43d7a02fa7a1ba9c3e3d8f381ab
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1895468629:1693325375:aTLCwdApnpkjTN2GxdlUBDOgYqZ6B3x92Mwg9yOGvaI/7fe64d7c1f34b517/aee669fc9d434ca HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: aee669fc9d434ca
Content-Length: 24808
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 16:52:11 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: OC2QtsvzHGXZNvPf9W5P4psjFzz3K2RU/GWXiCB64JwTBF+LP8HwSTmuV4e3f2X4JiW5sE/90dwnvJKRAT4rcdedEEmgtIK4K2Ds5in6qxTM3QH4mNR3hhQ8aJcF3meg$MveEbMQSDITafzmgUnRQug==
cf-chl-out-s: Z8/4O30x4dMWQWDXTi0EhQhXnMG8t/AWmtdYBX6AIZ5Hr7a1j7qtNeVTtF3i43XeplJRO4iWtLNeUQHMNR5B14wbdnYK7RyZewc9sVFJcicS06WDjby0dweCfk1M9G5B90jZGYqHBePHOE4KbjGfXyefktfEAK9SChgklcemYJpSz6YRBE1gRS5FEcHOH2RDi7ys645Guo28wGTUUIF/IAKMkGPqS4ciYHHC2rpCGTTlJeEykUcqcEGQUNqZCLyE+gvGB/Osjm3q07XKzMVsEQ==$86LGW0R8izwIAkrYJfuGcg==
server: cloudflare
cf-ray: 7fe64d9388e2b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/favicon.ico
200 OK 3.3 kB URL GET HTTP/3 01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/favicon.ico
IP
Requested by https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/?qrc=dimitri.kardamanidis@ardaghgroup.com
Certificate IssuerGoogle Trust Services LLC
Subjectc1a9ed330cc99af178dfc013.workers.dev
FingerprintC2:D5:CD:F4:16:0A:AE:98:BB:66:45:78:A1:88:03:36:21:46:FE:D2
ValidityMon, 14 Aug 2023 22:55:41 GMT - Sun, 12 Nov 2023 22:55:40 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3271), with no line terminators
Hash 36e673173b87831a717faa166d56a1f2
09d60ac4973f11946e69d2f1681613a8248130fa
9222a7f93e292e23f4af514fc87e7dac4ad8f67009ca6a52a018cd6ec10a7360
GET /favicon.ico HTTP/1.1
Host: 01aed1c7.c1a9ed330cc99af178dfc013.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/?qrc=dimitri.kardamanidis@ardaghgroup.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 16:52:07 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8To8r8v6U%2BIqzCR2peCVOncBCNTxh7v3FTHrbPGp77gwzyVC2mgbWxRB1YJMYDtbFLiCVRc93jiH0HWWJWPcLrx2Co8mLZ6I0Lxcv5HWw%2FD2oqoVFO9mjORg8Czy4rokMKClaS%2Fz8afqlX%2Bp5jMIAzEXxVLpDIJL3z3nfco7iko%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fe64d7c0934b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
200 OK 25 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
IP
Requested by https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/?qrc=dimitri.kardamanidis@ardaghgroup.com
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11051)
Hash 6818d233cdce5c1d1b0e92fe4dd439fd
0cdb7d6caa4fd2698393e2ed344fe90950437c97
cd81da1db71b3d906fed54683f323d7b846d3d5c6ad26707665b9e2832e8227e
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://01aed1c7.c1a9ed330cc99af178dfc013.workers.dev/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 16:52:07 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 7fe64d7c1f34b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
200 OK 110 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type ASCII text, with very long lines (32960)
Size 110 kB (109863 bytes)
Hash 46c21d0acecbd2212374b27c7d1b078a
5861965e506acaaa7d10e5b9c31e99d254b85560
5f5fbee72883732799d75f6c08679ed8a6e769ae4f3afdcd3721103a481afa80
GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; brcap=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:16 GMT
Content-Type: application/x-javascript
content-length: 109863
Connection: close
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT
ETag: 0x8DAFF34DD9DC630
x-ms-request-id: 75f8ab9d-801e-0027-55a6-d7774e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165216Z-mg5rvpzd1928h09tp8fyauuh38000000014000000000c5ux
X-Cache: TCP_HIT
Accept-Ranges: bytes
Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=7fe64d7c1f34b517
200 OK 182 kB URL GET HTTP/3 challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=7fe64d7c1f34b517
IP
Requested by https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 182 kB (182033 bytes)
Hash 7f3c65615f08fddca80ec52ee665edb1
f11bda4543c1e13324a7fed337bde8069b41fcb1
ba90bc6a8811c6f302b54d01daaa67cb836c72e88f07d0376475bc75ae2dd051
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=7fe64d7c1f34b517 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/if17n/0x4AAAAAAAJLRWBJPe2FmpMh/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 16:52:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 7fe64d7cc868b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_2W3IEdsiCwViwvv0RWyRLg2.js
200 OK 689 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_2W3IEdsiCwViwvv0RWyRLg2.js
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
Size 689 kB (689016 bytes)
Hash 3b72e939a304ce05f0ceab4a0ac39dd9
b2cfd3cb1bd0ee53c795e040063d0f55f544d939
cc58721894324d6f6f53b7fe4cb0d08f923aa75e52506c0a58d29e4390b7cedd
GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_2W3IEdsiCwViwvv0RWyRLg2.js HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 689016
Content-Type: application/x-javascript
Date: Tue, 29 Aug 2023 16:52:13 GMT
Connection: keep-alive
Keep-Alive: timeout=5
sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js
200 OK 16 kB URL GET HTTP/1.1 sultaniselbiseleri.com/aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js
IP
ASN #43624 Pq Hosting S.r.l.
Requested by https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
Certificate IssuerLet's Encrypt
Subjectsultaniselbiseleri.com
Fingerprint1C:53:CC:F6:B0:23:06:95:8E:14:EA:4B:5D:BA:75:50:3F:BD:74:FA
ValidityWed, 23 Aug 2023 21:27:37 GMT - Tue, 21 Nov 2023 21:27:36 GMT
File type ASCII text, with very long lines (14775)
Hash 3c6f74f17a1047c4cbb93cd6e456a2bc
4ecbaced5ca7ec33f4c247750f57c3ca31b94be6
2db2f2ea915f4423171358be6337a68b5b3ed82c63bf3d02433ad4a5046c566a
GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1
Host: sultaniselbiseleri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sultaniselbiseleri.com/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&ste=fkokvtk.mctfcocpkfku%40ctfcijitqwr.eqo
DNT: 1
Connection: keep-alive
Cookie: qPdM=37g0Zc0P6PHu; qPdM.sig=co0s0LfXFw2FwAyf8TjWdCb2-qU; buid=0.AQQAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPYryHB3EmnXomALf4FK9TKZllzXjtnsG4lRtD_mpnjoQDS9BqGmrP4sKtDyS6jYSTFm9hbxdctAuTZKKM30kSlrAjIduJN6-SCtQMaTay48EgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPic7Ruh0YWW7gCq177X5WzNZ8egFjlHFBhFkW1sQDk_5oEN49twKQ_GXstaifaajCIglvYmNYMWmObzJtNEqt8U1tXh5FpjneBGqsswIyDOExG-tGvdwZmZy07UfnDIPuLmxRKlEqkuwPa3eY7EBIt47NXRXZImM2u26DTVoR3yv5yYBKDNZdNpPGvXS0HdOUgi_H_RuYSOUEzvEt54H8hvgSeTzUoRVFtkdtKRbDlTQgAA; fpc=Ah4Wh0bfQodFqvqf4wqVZvK8Ae7AAQAAADwZgNwOAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; brcap=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 16:52:17 GMT
Content-Type: application/x-javascript
content-length: 15748
Connection: close
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Last-Modified: Thu, 26 Jan 2023 00:32:55 GMT
ETag: 0x8DAFF34DE08B462
x-ms-request-id: 0fea7c70-101e-001a-1351-d78944000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Access-Control-Allow-Origin: *
x-azure-ref: 20230829T165217Z-6nqwcuth9x0vz9358sacn30p48000000018g0000000001c6
X-Cache: TCP_HIT
Accept-Ranges: bytes
Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
208.75.122.11
45.150.67.156
20.190.177.23
104.17.3.184
0.0.0.0