Report - edevletaidatiadehizlionay.ml/

Report Overview

Submitted URL
edevletaidatiadehizlionay.ml/
IP
172.67.188.151
ASN
#13335 CLOUDFLARENET
Submitted
2023-01-02 05:23:51
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
cdn.e-devlet.gov.tr	104569	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.5 kB	86 kB	31.3.2.116
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	797 B	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.213.121.129
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	63 kB	34.120.237.76
edevletaidatiadehizlionay.ml	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	787 B	6.5 kB	172.67.188.151
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.8 kB	9.5 kB	104.18.20.226
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-02 05:23:32	low	Client IP	Internal IP	ET INFO DNS Query for Suspicious .ml Domain
2023-01-02 05:23:32	medium	Client IP	172.67.188.151	ET INFO HTTP Request to a *.ml domain
2023-01-02 05:23:33	medium	Client IP	172.67.188.151	ET INFO HTTP Request to a *.ml domain

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-01-01	medium	edevletaidatiadehizlionay.ml/	Government of Turkey
2023-01-01	medium	edevletaidatiadehizlionay.ml/	Government of Turkey

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-02	medium	edevletaidatiadehizlionay.ml/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	unknown	0 B	2023-03-07	2024-04-24
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-24 04:39:20 Times Seen37030502 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.e-devlet.gov.tr/themes/izmir/js/giris.js	6.5 kB	2023-03-12	2024-02-25
Pretty URL cdn.e-devlet.gov.tr/themes/izmir/js/giris.js IP 31.3.2.116 ASN #21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 12:52:09 Last Seen2024-02-25 01:00:07 Times Seen118 Hash 059bb725f3d84c59e2ddd3dc80d99eb5 8d21ce8771b0aa7b5e208225c9dbfe5ae1bd0290 7f82762e08bf34317398e748361957c5632553ec9f0089913fee95057cdb20b0 Loading...

	cdn.e-devlet.gov.tr/themes/izmir/js/es/jquery.jcryption.js	66 kB	2023-03-07	2024-04-23
Pretty URL cdn.e-devlet.gov.tr/themes/izmir/js/es/jquery.jcryption.js IP 31.3.2.116 ASN #21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:45:57 Last Seen2024-04-23 20:12:06 Times Seen188 Hash 09fb34e722b4b10fd3e28d1934d38e34 f9fdcea12b3162a53e87bb8adb4c30e49b306ec8 790c8abfa03882377c7a9302bdb14dd1c3dab477280255161bc016d7b5f3b121 Loading...

	edevletaidatiadehizlionay.ml/	346 B	2023-03-07	2024-04-14
Pretty URL edevletaidatiadehizlionay.ml/ IP 172.67.188.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:45:57 Last Seen2024-04-14 05:57:35 Times Seen54 Hash 4d9a745f6abb190490ddc9c50620e007 d0e07ec8919f7358ab22ac562e1ca6f316462f57 fbc09c43356abd6e3aa60f8e6461edb809c886fa2c7f0960fc1eb536b580ecc7 Loading...

	edevletaidatiadehizlionay.ml/	750 B	2023-03-07	2024-04-14
Pretty URL edevletaidatiadehizlionay.ml/ IP 172.67.188.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:45:57 Last Seen2024-04-14 05:57:35 Times Seen41 Hash 336dbb9bdc3d061f413f042734bf503b c2c6eb21a05197fe40b803fade0f4c776fc4c4e2 4d11b3fe98efb18202f6278d9c61c05c3bacbd9340cdf375cbec81c439b9b058 Loading...

	cdn.e-devlet.gov.tr/themes/izmir/js/es/common_messages_tr.1.7.js	1.7 kB	2023-03-08	2023-03-26
Pretty URL cdn.e-devlet.gov.tr/themes/izmir/js/es/common_messages_tr.1.7.js IP 31.3.2.116 ASN #21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 15:23:40 Last Seen2023-03-26 01:20:42 Times Seen3 Hash 71a69c769cae9c6c516dbbb29001866b 0cc84092dc236b13c1e54c3b3d837548822d60ab cc0ddf2f8f49be9521d32ef463122d16281f8a8c263c6c7c41f202b7583470cd Loading...

	cdn.e-devlet.gov.tr/themes/izmir/js/header.js	9.9 kB	2023-03-07	2023-04-30
Pretty URL cdn.e-devlet.gov.tr/themes/izmir/js/header.js IP 31.3.2.116 ASN #21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:45:57 Last Seen2023-04-30 23:12:38 Times Seen19 Hash c229f31742c282e0d9b8e772a1e0fd2b 12612c2be26e2cb235b516f16954918af4f08763 eb1392dd09409f6ff7d3154be56020344ae9891e043851a595172a71f1620ef1 Loading...

HTTP Transactions (43)

URL IP Response Size

edevletaidatiadehizlionay.ml/

172.67.188.151

200 OK

4.7 kB

URL HTTP/1.1
edevletaidatiadehizlionay.ml/
IP
172.67.188.151:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (573), with CRLF line terminators
Size
4.7 kB (4693 bytes)
Hash
5347f11ff14cd568291d0be98a1c4613
016ef7c022522f27fc08cba58de2942c767dca9f
c1fd7ac47dbba02840a28c9b2fd09ff1722bd057b72f9898c5898426f6c6b4d0

Detections

Analyzer	Verdict	Alert
openphish	Government of Turkey
fortinet	Phishing

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.ml domain

HTTP Headers

GET / HTTP/1.1
Host: edevletaidatiadehizlionay.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 02 Jan 2023 05:23:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.26, PleskLin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1G6JA%2FVkPsZ9wcT9l5%2BnNBxrt61luB299EWc0f0WxD7lwuiiGxsX0pZiRNrKttFqZp0RLsLwwnt5TZL72i%2BILLoa6iccKlkNZQTLaXKKIcG%2Bx2fXZkapR8%2BFK6Q1L92sP8WUU7CZo6eA9qlReJQa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78311060188ab521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8afcbdfc50b3ac9488d629a1a4923b81
933fe7b84c2fbd931da70e92c86fa89110e7cfe7
9857b3b813177c23f90a7e53c7ec1f878362b1da27bc19493bebffc358a4b852

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9857B3B813177C23F90A7E53C7EC1F878362B1DA27BC19493BEBFFC358A4B852"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10809
Expires: Mon, 02 Jan 2023 08:23:49 GMT
Date: Mon, 02 Jan 2023 05:23:40 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
116c0a4485584a949c2edff4a949549f
de064c35dd7ce008d69932915ddb3d04fe7f2eeb
4fc3e38254e220857100a1b2a7c96209fc9d1141ccfb9057181da9745e78fb8e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FC3E38254E220857100A1B2A7C96209FC9D1141CCFB9057181DA9745E78FB8E"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16373
Expires: Mon, 02 Jan 2023 09:56:33 GMT
Date: Mon, 02 Jan 2023 05:23:40 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 02 Jan 2023 04:36:03 GMT
content-type: application/json
age: 2857
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e71f8c03e957e6b1526fc3f1537b3d95
6f1e5a549978b3cc67fa6142fd4bf45d2730bf71
29e3d9e5d2fec1b8e13beafa7970157db0c8b07392c4dd53fc033b609f2fc7ad

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "29E3D9E5D2FEC1B8E13BEAFA7970157DB0C8B07392C4DD53FC033B609F2FC7AD"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4538
Expires: Mon, 02 Jan 2023 06:39:18 GMT
Date: Mon, 02 Jan 2023 05:23:40 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: VqrS3w4zvCxV4H0GmRAnm/45hT5u60a71OZxxn0sYtXSOzhxCmUAD6l81+VLRcU0ewBkMxe6R3c=
x-amz-request-id: XFRDKJJ2PAMXRMTZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 02 Jan 2023 04:58:08 GMT
age: 1532
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 02 Jan 2023 05:23:40 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
982fc9da283a627a928b8ba4ff99e1cd
c5dfc13a3993f65ecee207e14ce4893fff6b0425
3cf3fca6347d5896b21f431d142e7876890d234acb20209215c728e2896b1a31

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 02 Jan 2023 05:23:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 06 Jan 2023 03:19:27 GMT
ETag: "c5dfc13a3993f65ecee207e14ce4893fff6b0425"
Last-Modified: Mon, 02 Jan 2023 03:19:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7831106399b7b512-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
982fc9da283a627a928b8ba4ff99e1cd
c5dfc13a3993f65ecee207e14ce4893fff6b0425
3cf3fca6347d5896b21f431d142e7876890d234acb20209215c728e2896b1a31

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 02 Jan 2023 05:23:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 06 Jan 2023 03:19:27 GMT
ETag: "c5dfc13a3993f65ecee207e14ce4893fff6b0425"
Last-Modified: Mon, 02 Jan 2023 03:19:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 783110639aa40b55-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
982fc9da283a627a928b8ba4ff99e1cd
c5dfc13a3993f65ecee207e14ce4893fff6b0425
3cf3fca6347d5896b21f431d142e7876890d234acb20209215c728e2896b1a31

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 02 Jan 2023 05:23:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 06 Jan 2023 03:19:27 GMT
ETag: "c5dfc13a3993f65ecee207e14ce4893fff6b0425"
Last-Modified: Mon, 02 Jan 2023 03:19:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7831106399db0b51-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
982fc9da283a627a928b8ba4ff99e1cd
c5dfc13a3993f65ecee207e14ce4893fff6b0425
3cf3fca6347d5896b21f431d142e7876890d234acb20209215c728e2896b1a31

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 02 Jan 2023 05:23:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 06 Jan 2023 03:19:27 GMT
ETag: "c5dfc13a3993f65ecee207e14ce4893fff6b0425"
Last-Modified: Mon, 02 Jan 2023 03:19:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 783110639ec5b500-OSL

ocsp.globalsign.com/gsrsaovsslca2018

104.18.20.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
982fc9da283a627a928b8ba4ff99e1cd
c5dfc13a3993f65ecee207e14ce4893fff6b0425
3cf3fca6347d5896b21f431d142e7876890d234acb20209215c728e2896b1a31

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 02 Jan 2023 05:23:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 06 Jan 2023 03:19:27 GMT
ETag: "c5dfc13a3993f65ecee207e14ce4893fff6b0425"
Last-Modified: Mon, 02 Jan 2023 03:19:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7831106398f9b515-OSL

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 02 Jan 2023 04:33:35 GMT
age: 3005
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/fonts/opensans/open-sans-v18-latin-ext_latin-regular.109.woff2

31.3.2.116

200 OK

19 kB

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/fonts/opensans/open-sans-v18-latin-ext_latin-regular.109.woff2
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type
Web Open Font Format (Version 2), TrueType, length 19396, version 1.0\012- data
Size
19 kB (19396 bytes)
Hash
be21e759f9abd15b8cef68d92cedc081
84a2292a0ae289e26139f38470c50b9fd9ed421f
537d46273fe124bbced2f098f26222fa3155741e9d76f906c3c39e7fa09bf6a8

HTTP Headers

GET /themes/izmir/fonts/opensans/open-sans-v18-latin-ext_latin-regular.109.woff2 HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://edevletaidatiadehizlionay.ml
Connection: keep-alive
Referer: https://cdn.e-devlet.gov.tr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: application/octet-stream
content-length: 19396
vary: Accept-Encoding
last-modified: Wed, 11 Nov 2020 12:17:21 GMT
cache-control: max-age=7776000
expires: Sun, 02 Apr 2023 05:23:55 GMT
age: -136
x-mserver: 2215
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 04584a1d883c2e404a431463dd4c4f40
access-control-allow-origin: *
x-cache-status: Edge : HIT,
accept-ranges: bytes
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/fonts/opensans/open-sans-v18-latin-ext_latin-600.109.woff2

31.3.2.116

200 OK

20 kB

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/fonts/opensans/open-sans-v18-latin-ext_latin-600.109.woff2
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type
Web Open Font Format (Version 2), TrueType, length 20108, version 1.0\012- data
Size
20 kB (20108 bytes)
Hash
ba13b15f5586edb960ed4a1f2ab7a27b
62e43560aa59a69a1e7647a3516a90537ed0e520
0b155ade172e77bc397377c1856af15289b509590b332b351e48f5c11f73a35e

HTTP Headers

GET /themes/izmir/fonts/opensans/open-sans-v18-latin-ext_latin-600.109.woff2 HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://edevletaidatiadehizlionay.ml
Connection: keep-alive
Referer: https://cdn.e-devlet.gov.tr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: application/octet-stream
content-length: 20108
vary: Accept-Encoding
last-modified: Wed, 11 Nov 2020 12:17:21 GMT
cache-control: max-age=7776000
expires: Sun, 02 Apr 2023 05:23:55 GMT
age: -127
x-mserver: 2215
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 85b55908b1bed6c6b0da8f1e6541cd7d
access-control-allow-origin: *
x-cache-status: Edge : HIT,
accept-ranges: bytes
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/fonts/edk.109.109.woff

31.3.2.116

200 OK

39 kB

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/fonts/edk.109.109.woff
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type
Web Open Font Format, CFF, length 38876, version 1.0\012- data
Size
39 kB (38876 bytes)
Hash
f59fe053cd781e9eed0d2944225a469e
f3cc146f47b8bc2a1e8ab5ba4452254a730afc5b
cf3063b5a69eef92d33fc319c5baf95fd124ad16dd4dad1995877f1a6aac59f4

HTTP Headers

GET /themes/izmir/fonts/edk.109.109.woff HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://edevletaidatiadehizlionay.ml
Connection: keep-alive
Referer: https://cdn.e-devlet.gov.tr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: application/font-woff
content-length: 38876
last-modified: Wed, 14 Dec 2022 12:59:27 GMT
cache-control: max-age=7776000
expires: Sun, 02 Apr 2023 05:23:55 GMT
age: 3942
x-mserver: 2215
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 710464d1d8b8a2791b43d151ce6c3bd8
access-control-allow-origin: *
x-cache-status: Edge : HIT,
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
e2a99db6956684dc306ada584f1907d8
21c3fc85b00308907c1cffcb36b1ba1a4617f613
cf568c4a26fb352228e849b18fbca0f6fd3b3a89055cd5f4fc0cdd11f9b9733e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3599
Cache-Control: max-age=103387
Content-Type: application/ocsp-response
Date: Mon, 02 Jan 2023 05:23:41 GMT
Etag: "63b14d29-1d7"
Expires: Tue, 03 Jan 2023 10:06:48 GMT
Last-Modified: Sun, 01 Jan 2023 09:06:49 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

edevletaidatiadehizlionay.ml/CryptoServlet?generateKeyPair=true&pn=%2F&ajax=1&token=

172.67.188.151

404 Not Found

463 B

URL HTTP/1.1
edevletaidatiadehizlionay.ml/CryptoServlet?generateKeyPair=true&pn=%2F&ajax=1&token=
IP
172.67.188.151:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
463 B (463 bytes)
Hash
a6036f13b4653fc9f220c93f17616adf
d55e1955c2196383b6d91a42f9840da407b003a8
81becfd13f789691b32c0ef329e81884c275fb2b66221752e4603d18eb14d73d

Detections

Analyzer	Verdict	Alert
openphish	Government of Turkey

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.ml domain

HTTP Headers

GET /CryptoServlet?generateKeyPair=true&pn=%2F&ajax=1&token= HTTP/1.1
Host: edevletaidatiadehizlionay.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/

HTTP/1.1 404 Not Found
Date: Mon, 02 Jan 2023 05:23:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 01 Jan 2023 17:14:15 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZkBJI%2Bez67aFRagCwgD8iErUSd0JCn398qb1YTAaFIVsKQap7usXI%2F0IGN6lk6KLgcFxqOtrWiEm59H5X2CIwIk10T3aBYpGSdDW2y%2BsP%2BD6gkwFBtcYXagMiiSF0mqKQYZRe2hY%2BErYqFEyL2pc"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78311066bbccb521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

push.services.mozilla.com/

34.213.121.129

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.213.121.129:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lKbYR3kuZBBXy4hW4s9DfQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qP9zaIFcaZu8TM9arh/nTh9g6ec=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c4719f10b16aa492c5dbdb8a1bfc20af
21831c11bfc9679c9f0ebc1f6a39284a5d16be56
c8682ee9e025254ee9cd1d9c663a40707cb170c141a328a7de07ded8de06f787

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8682EE9E025254EE9CD1D9C663A40707CB170C141A328A7DE07DED8DE06F787"
Last-Modified: Sun, 01 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7362
Expires: Mon, 02 Jan 2023 07:26:24 GMT
Date: Mon, 02 Jan 2023 05:23:42 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c4719f10b16aa492c5dbdb8a1bfc20af
21831c11bfc9679c9f0ebc1f6a39284a5d16be56
c8682ee9e025254ee9cd1d9c663a40707cb170c141a328a7de07ded8de06f787

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8682EE9E025254EE9CD1D9C663A40707CB170C141A328A7DE07DED8DE06F787"
Last-Modified: Sun, 01 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7362
Expires: Mon, 02 Jan 2023 07:26:24 GMT
Date: Mon, 02 Jan 2023 05:23:42 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c4719f10b16aa492c5dbdb8a1bfc20af
21831c11bfc9679c9f0ebc1f6a39284a5d16be56
c8682ee9e025254ee9cd1d9c663a40707cb170c141a328a7de07ded8de06f787

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8682EE9E025254EE9CD1D9C663A40707CB170C141A328A7DE07DED8DE06F787"
Last-Modified: Sun, 01 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7362
Expires: Mon, 02 Jan 2023 07:26:24 GMT
Date: Mon, 02 Jan 2023 05:23:42 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c4719f10b16aa492c5dbdb8a1bfc20af
21831c11bfc9679c9f0ebc1f6a39284a5d16be56
c8682ee9e025254ee9cd1d9c663a40707cb170c141a328a7de07ded8de06f787

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8682EE9E025254EE9CD1D9C663A40707CB170C141A328A7DE07DED8DE06F787"
Last-Modified: Sun, 01 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7362
Expires: Mon, 02 Jan 2023 07:26:24 GMT
Date: Mon, 02 Jan 2023 05:23:42 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb364ca2-5024-4c83-8f81-f5093c3e8713.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb364ca2-5024-4c83-8f81-f5093c3e8713.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (9981 bytes)
Hash
52ae2bf18008fa0f116e735c650dd4f4
faf43ef73113f33e33c02ec3239d2830dbc220fd
fc3d90d4776fc4f3f0dc916b7c6484ead041f888c6c33ec2c577aff84ebe90c8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb364ca2-5024-4c83-8f81-f5093c3e8713.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9981
x-amzn-requestid: a104c56d-8bbc-4798-b228-b6b0228d718a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFSM2H1NIAMFpMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b1fd85-703b87cc5e24d330483b5e5d;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 21:39:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: B3v04ACBc4oVaR8xgOflAqw8DT6oED_u6uz8pnpld0nBGg5ajDta7Q==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 21:55:08 GMT
age: 26914
etag: "faf43ef73113f33e33c02ec3239d2830dbc220fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d70b7e-1974-4723-891e-b098c2494df9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10523 bytes)
Hash
4beaa41b47b8d7a83ee27374c72d83fb
7cdb4bdf49a3dd32340820ea7b18ff4df6312200
98de607e701402c547df168dae1741a9429c2bbfff8b31405a474a7936c588f0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d70b7e-1974-4723-891e-b098c2494df9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10523
x-amzn-requestid: 73ae93a0-6482-4f63-b063-d47b23284ce1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d8Dn6Fh2oAMFrDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae4c98-4c175ff776540fe904b1f469;Sampled=0
x-amzn-remapped-date: Fri, 30 Dec 2022 02:27:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _ehfT2jD8U7JyofUpjrWp7Wbz8YFWbuWc5xa37ujOXlV6wtzwxFrEg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 11:35:50 GMT
age: 64072
etag: "7cdb4bdf49a3dd32340820ea7b18ff4df6312200"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7153fc4b-7c90-467e-ba1a-51f499f28968.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7711 bytes)
Hash
b56e64879a03f94bf2c9cb2e0f0e74d2
19d1b0ffa5052e9d3845f52dfebaf4dc76294423
2d96bf03a8f188d0d93d42eae868c06dd12bf58dabecb2c5bb25c4edab42e67a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7153fc4b-7c90-467e-ba1a-51f499f28968.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7711
x-amzn-requestid: 51d07dbb-2cba-4113-aaab-ac7b0bc7d9a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFSLyHZ-IAMFaTA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b1fd7e-114b94170303ccdb6a4253ad;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 21:39:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: F4upgc6kVPs-6XcwGIS6O5NRUwrbFTwRN0IUDhXL1TobqqwlEnaHIQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 21:55:08 GMT
etag: "19d1b0ffa5052e9d3845f52dfebaf4dc76294423"
content-type: image/jpeg
age: 26914
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6c2763-3047-4d8a-adab-82148ff57727.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7660 bytes)
Hash
dc62c3ca8bc387a91c7d4711b5bc2409
7a984b459227e11984faa2539569a90875a58d29
e14a0e22b58fc1f3f392b842573e3abff7b24eb66db6b351046a186acc3b2954

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6c2763-3047-4d8a-adab-82148ff57727.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7660
x-amzn-requestid: 9338abf2-1191-47da-95ff-0a201604fbc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d-sKCEDhoAMFZ4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63af5a40-433f4ba9780dbc7a485ccbe9;Sampled=0
x-amzn-remapped-date: Fri, 30 Dec 2022 21:38:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZCKSB-MwWwP2KTj7XMSHOZZcse5xmPE0JtkkBSLGnWqJdNyr-5oQzQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 21:51:59 GMT
age: 27103
etag: "7a984b459227e11984faa2539569a90875a58d29"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf86a4d4-d187-4199-b789-48ed7b12b68c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10036 bytes)
Hash
d632b1666de6a64512941efcbe64cb0e
9f72a2f67a6c0365b7667edc91b2b954847b15e0
d002d7a247939a94c76fe00aa304afa28bfe6bf4827e4fde625593d0f1f3597a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbf86a4d4-d187-4199-b789-48ed7b12b68c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10036
x-amzn-requestid: 41bfcbb1-3cd0-417c-b1c6-954abb968ec3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFSD5HgeIAMFt6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b1fd4b-55beac627a99008106cf3b12;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 21:38:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: huyycDByN62r__fKfqx031YqGth7lOWe9LHsGmfhRiYx3ygtKUfvVg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 21:55:23 GMT
age: 26899
etag: "9f72a2f67a6c0365b7667edc91b2b954847b15e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb9e048a-d832-4c9c-bbf4-523cf2df949e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10904 bytes)
Hash
63e10036442be6087f22f671351bfcf4
d23fda523cd1581a497c1e8d93b6a3a65bbbd05d
bd17928141e8ba15eaf14f140f9cc6648502da10bef74dab32e1790f68d150d7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb9e048a-d832-4c9c-bbf4-523cf2df949e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10904
x-amzn-requestid: e672bb95-0521-41e2-b44d-18d108768f0c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFRyVGO0IAMFfsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b1fcdb-2e2b0c1e73840de93343ce08;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 21:36:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RoBgvzAMnMxF47CsTpw8nEsyCcYeCsElL-FWeEE2G-c6lvPTR-6qqw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 21:48:43 GMT
age: 27299
etag: "d23fda523cd1581a497c1e8d93b6a3a65bbbd05d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/js/common.js

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/js/common.js
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/js/common.js HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
last-modified: Wed, 14 Dec 2022 12:59:31 GMT
expires: Sun, 02 Apr 2023 05:23:55 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2215
content-encoding: gzip
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 8031ba5c17512289edeaeb68c05c4131
access-control-allow-origin: *
content-type: application/javascript;charset=UTF-8
x-cache-status: Edge : HIT,
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/images/button-right.109.svg

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/images/button-right.109.svg
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/images/button-right.109.svg HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.e-devlet.gov.tr/themes/izmir/css/giris.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Dec 2017 14:11:06 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
expires: Sun, 02 Apr 2023 05:23:55 GMT
age: 2
x-mserver: 2216
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 5bfd0f8e26d6b0cdc35a27301a11da8f
access-control-allow-origin: *
x-cache-status: Edge : HIT,
content-encoding: br
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/images/favicons/favicon-196x196.png

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/images/favicons/favicon-196x196.png
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/images/favicons/favicon-196x196.png HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:56 GMT
content-type: image/png
expires: Mon, 02 Jan 2023 07:23:56 GMT
cache-control: max-age=7200
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2216
content-encoding: gzip
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 067d2fea516fd862b26b830d7ebf2ce7
x-cache-status: Edge : HIT,
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/istanbul/images/agencies/1.png

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/istanbul/images/agencies/1.png
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/istanbul/images/agencies/1.png HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: image/png
expires: Mon, 02 Jan 2023 07:23:55 GMT
cache-control: max-age=7200
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2200
content-encoding: gzip
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 25fc3b89c8513d03aa14656bdf181cc7
x-cache-status: Edge : HIT,
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/js/es/jquery.jcryption.js

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/js/es/jquery.jcryption.js
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/js/es/jquery.jcryption.js HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
last-modified: Thu, 01 Sep 2022 09:38:37 GMT
expires: Sun, 02 Apr 2023 05:23:55 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2137
content-encoding: gzip
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: c453f987f6a6dc9d37665c4592b82e59
access-control-allow-origin: *
content-type: application/javascript;charset=UTF-8
x-cache-status: Edge : HIT,
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/js/es/common_messages_tr.1.7.js

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/js/es/common_messages_tr.1.7.js
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/js/es/common_messages_tr.1.7.js HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:56 GMT
last-modified: Tue, 15 Nov 2022 09:38:52 GMT
expires: Sun, 02 Apr 2023 05:23:56 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2216
content-encoding: gzip
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 6f1d88fa77734ad132c8b551236d0d5a
access-control-allow-origin: *
content-type: application/javascript;charset=UTF-8
x-cache-status: Edge : HIT,
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/images/arrow-left.109.svg

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/images/arrow-left.109.svg
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/images/arrow-left.109.svg HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.e-devlet.gov.tr/themes/izmir/css/giris.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Dec 2017 14:11:06 GMT
expires: Sun, 02 Apr 2023 05:23:55 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, User-Agent
x-mserver: 2216
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 15019bb9e0251acbaf4d8d7ac94edb6f
access-control-allow-origin: *
x-cache-status: Edge : HIT,
content-encoding: br
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/images/form-progress.svg

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/images/form-progress.svg
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/images/form-progress.svg HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Dec 2017 14:11:06 GMT
expires: Sun, 02 Apr 2023 05:23:55 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2137
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 78e9fac4cc7287859aae82a071efd5b1
access-control-allow-origin: *
x-cache-status: Edge : HIT,
content-encoding: br
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/js/giris.js

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/js/giris.js
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/js/giris.js HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
last-modified: Wed, 14 Dec 2022 12:59:27 GMT
expires: Sun, 02 Apr 2023 05:23:55 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2216
content-encoding: gzip
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: db9b40e5279a3fe527ee485459bf08ea
access-control-allow-origin: *
content-type: application/javascript;charset=UTF-8
x-cache-status: Edge : HIT,
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/images/edkkds.svg

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/images/edkkds.svg
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/images/edkkds.svg HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: image/svg+xml
last-modified: Fri, 05 Jan 2018 11:42:29 GMT
expires: Sun, 02 Apr 2023 05:23:55 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2200
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: d0536bd436902bf1be073cf50be12074
access-control-allow-origin: *
x-cache-status: Edge : HIT,
content-encoding: br
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/images/auth-methods.109.svg

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/images/auth-methods.109.svg
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/images/auth-methods.109.svg HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.e-devlet.gov.tr/themes/izmir/css/giris.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: image/svg+xml
last-modified: Fri, 05 Jan 2018 11:42:29 GMT
expires: Sun, 02 Apr 2023 05:23:55 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2137
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: b0920c306b107df905bd344ef4a0d601
access-control-allow-origin: *
x-cache-status: Edge : HIT,
content-encoding: br
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/css/giris.css

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/css/giris.css
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/css/giris.css HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: text/css
last-modified: Wed, 14 Dec 2022 12:58:36 GMT
expires: Mon, 02 Jan 2023 07:23:55 GMT
cache-control: max-age=7200
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2137
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 56fde0a906d566a856965bb7032fa63e
x-cache-status: Edge : HIT,
content-encoding: br
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/css/base.css

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/css/base.css
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/css/base.css HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
content-type: text/css
last-modified: Wed, 14 Dec 2022 12:58:39 GMT
expires: Mon, 02 Jan 2023 07:23:55 GMT
cache-control: max-age=7200
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2215
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 3c9b52d9c8ceca138a49002728cff223
x-cache-status: Edge : HIT,
content-encoding: br
X-Firefox-Spdy: h2

cdn.e-devlet.gov.tr/themes/izmir/js/header.js

31.3.2.116

200 OK

0 B

URL HTTP/2
cdn.e-devlet.gov.tr/themes/izmir/js/header.js
IP
31.3.2.116:0
ASN
#21245 Medianova Internet Hizmetleri Ve Ticaret Anonim Sirketi

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /themes/izmir/js/header.js HTTP/1.1
Host: cdn.e-devlet.gov.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://edevletaidatiadehizlionay.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 02 Jan 2023 05:23:55 GMT
last-modified: Thu, 01 Sep 2022 09:39:16 GMT
expires: Sun, 02 Apr 2023 05:23:55 GMT
cache-control: max-age=7776000
vary: Accept-Encoding, Accept-Encoding, User-Agent
x-mserver: 2137
content-encoding: gzip
server: MNCDN-236
x-edge-location: DE-372
x-mnrequest-id: 63138220f8af5f8d7f8f07eddc607c38
access-control-allow-origin: *
content-type: application/javascript;charset=UTF-8
x-cache-status: Edge : HIT,
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (7)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (43)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers