Report - netspor.zip

Report Overview

Submitted URL
netspor.zip
IP
104.21.7.7
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 18:35:50
Access
public
Website Title
NETSPOR : Türkiyenin Kesintisiz Online Canlı Maç İzleme Sitesi
Final URL
netspor.zip/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
m3u8.mehmetkucukeksi.workers.dev	unknown	unknown	No data	No data	456 B	0 B	0.0.0.0
cdn.ampproject.org	329	2015-08-31	2015-10-09	2024-04-25	3.8 kB	168 kB	142.250.74.161
netspor.zip	unknown	unknown	No data	No data	1.7 kB	23 kB	172.67.155.87
4denemebonusu.com	unknown	2024-02-11	2024-03-16	2024-03-17	5.4 kB	948 kB	104.21.13.40
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-26	432 B	32 kB	142.250.74.138
blogger.googleusercontent.com	16485	2008-11-17	2012-05-25	2024-04-25	3.3 kB	172 kB	142.250.74.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	mehmetkucukeksi.workers.dev	Sinkholed

ThreatFox

No alerts detected

JavaScript (21)

	URL	Size	First Seen	Last Seen
	4denemebonusu.com/live/izle/stream1.php#amp=1	0 B	2023-03-07	2024-05-07
Pretty URL 4denemebonusu.com/live/izle/stream1.php#amp=1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 12:23:04 Times Seen37401335 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.ampproject.org/v0/amp-analytics-0.1.js	113 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/v0/amp-analytics-0.1.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 22:27:22 Last Seen2024-04-30 19:28:41 Times Seen43 Hash 04e1880db4cdd3cbfcbe2b04dd19392e 5546ad89fd2046519affc06959fde666380cee6c 7ae1368f53ed9125d6b81ea2a456c5240e5494ec26124e9d2448bc53443e8f27 Loading...

	cdn.ampproject.org/v0/amp-lightbox-0.1.js	27 kB	2024-04-25	2024-04-29
Pretty URL cdn.ampproject.org/v0/amp-lightbox-0.1.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 00:13:19 Last Seen2024-04-29 04:34:53 Times Seen8 Hash d156272ec438cc4f6b395e84d2ed5ab6 88d9cc75f304601bbe0048e616c669ba0fd4757e be1685cbf62af0bc6f3673c7dd9ad16cbbf4b7b70686925408c6cecc0522b09f Loading...

	4denemebonusu.com/live/izle/stream1.php#amp=1	0 B	2023-03-07	2024-05-07
Pretty URL 4denemebonusu.com/live/izle/stream1.php#amp=1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 12:23:04 Times Seen37401335 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	4denemebonusu.com/mobil/sitem.js	0 B	2023-03-07	2024-05-07
Pretty URL 4denemebonusu.com/mobil/sitem.js IP 104.21.13.40 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 12:23:04 Times Seen37401335 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	4denemebonusu.com/kralplayer/videojs8/video.min.js	562 kB	2023-10-21	2024-04-26
Pretty URL 4denemebonusu.com/kralplayer/videojs8/video.min.js IP 104.21.13.40 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-21 14:45:39 Last Seen2024-04-26 20:35:57 Times Seen5 Hash e6b4c03f89f8ed2617551d3c6c5c204e 95e5dfde548c542b2b940ddcc111158529ae9203 9ad2bd4cde85b353bf269c344cd006663e73997aff9ed8df2aa332c8987c5be3 Loading...

	4denemebonusu.com/live/izle/stream1.php#amp=1	0 B	2023-03-07	2024-05-07
Pretty URL 4denemebonusu.com/live/izle/stream1.php#amp=1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 12:23:04 Times Seen37401335 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	4denemebonusu.com/live/izle/stream1.php#amp=1	0 B	2023-03-07	2024-05-07
Pretty URL 4denemebonusu.com/live/izle/stream1.php#amp=1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 12:23:04 Times Seen37401335 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.ampproject.org/v0.js	285 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/v0.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen50 Hash 93b22676750227c6081037abf8baa351 d3c33bea647267cd0fef7c24d1431c40409b74b5 53da1339a0555a71431c0bbfb2bf946f300ee9d5fc2e5b9e0b424c93a2506a82 Loading...

	cdn.ampproject.org/v0/amp-iframe-0.1.js	26 kB	2024-04-25	2024-04-26
Pretty URL cdn.ampproject.org/v0/amp-iframe-0.1.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 05:06:20 Last Seen2024-04-26 20:35:57 Times Seen6 Hash 689f72db85571da6288f3f5a5f607959 f337c57c89f1ae35f0e41ce2784b5a83a19662ba 8be07463f59242dc397373ea3929039cca1d7c3cf7cad14c9213fc356b324f59 Loading...

	cdn.ampproject.org/v0/amp-anim-0.1.js	6.2 kB	2024-04-25	2024-04-26
Pretty URL cdn.ampproject.org/v0/amp-anim-0.1.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 16:33:43 Last Seen2024-04-26 23:08:40 Times Seen6 Hash cd53a756737229fe1a2180522f7e64d5 8c06ab9ad66a6b44e139f691125d074e5f95ad90 46db8c368bdeb8474bfe22e868330f405d9c37c43be84c21bc2ee744efb26af6 Loading...

	cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js	7.8 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen41 Hash bd778223dafaed0894e021593ad5dcbf ef1a45e18a85060334571cdc9eaf1e9435b5ffe9 2b753b9c13fe907246062aa577f7837fbd2ffebe71dec501c4cd6de494016ac8 Loading...

	4denemebonusu.com/live/izle/stream1.php#amp=1	0 B	2023-03-07	2024-05-07
Pretty URL 4denemebonusu.com/live/izle/stream1.php#amp=1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 12:23:04 Times Seen37401335 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	4denemebonusu.com/kralplayer/videojs8/lang/tr.js	7.0 kB	2023-11-09	2024-04-26
Pretty URL 4denemebonusu.com/kralplayer/videojs8/lang/tr.js IP 104.21.13.40 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 23:12:33 Last Seen2024-04-26 20:35:57 Times Seen3 Hash 18409377a062c95849221e8bc74a1117 4c5ad7a09f667c072a7cbaff9bebcca4c56e5882 22e0ce26ecb6d41b0735f84cf16fc77c25b19a769222799659da11c33951b569 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js	90 kB	2023-03-26	2024-05-07
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js IP 142.250.74.138 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 04:59:07 Last Seen2024-05-07 10:22:32 Times Seen8481 Hash 641dd14370106e992d352166f5a07e99 eda46747c71d38a880bee44f9a439c3858bb8f99 a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af Loading...

	cdn.ampproject.org/v0/amp-sidebar-0.1.js	31 kB	2024-04-25	2024-04-30
Pretty URL cdn.ampproject.org/v0/amp-sidebar-0.1.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 00:13:20 Last Seen2024-04-30 21:05:30 Times Seen23 Hash faa6d28df6d92df3e3a283cb48ad06f8 d156ad9927ed90c0a4e10d24201b1d221495f848 a8aa12f4db04964e0ebcc49a4fc965e0002d7a214fe2745c5c7ea88e5f4e7148 Loading...

	cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js	13 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen39 Hash c62cd4c81f0172d7ac84d15281d3fa09 8a966261eaadac311a2d6ae4f32942883911ec01 1f5211c3d83be6fa51f5b9face5beda901221f2a6cf261acb3bbf47d89594126 Loading...

	4denemebonusu.com/kralplayer/videojs/plugins/vastpro.js	136 kB	2023-10-21	2024-04-26
Pretty URL 4denemebonusu.com/kralplayer/videojs/plugins/vastpro.js IP 104.21.13.40 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-21 14:45:38 Last Seen2024-04-26 20:35:58 Times Seen8 Hash c76bcf146de77cf58cbb7e4f22fe8524 0d8e726f905862b030db64d6f1696d821ebfb2a9 85c6c66cc9f32b45c788b9e02d237fd00115ca9466cee45915c2d3d9e2d52386 Loading...

	4denemebonusu.com/sayac.html	256 B	2023-11-09	2024-04-26
Pretty URL 4denemebonusu.com/sayac.html IP 104.21.13.40 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-09 23:12:33 Last Seen2024-04-26 20:35:57 Times Seen2 Hash f53395eba3e23e602f89199f27d68490 5cd460b4a271022dbc79c65f235a576d174655ad 1bdda3490883f0520369701d35b922052b2f07890362c6e5491ec38c7a34717a Loading...

	cdn.ampproject.org/v0/amp-carousel-0.1.js	39 kB	2024-04-25	2024-04-28
Pretty URL cdn.ampproject.org/v0/amp-carousel-0.1.js IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 16:33:43 Last Seen2024-04-28 04:13:30 Times Seen8 Hash 8cd77496ff43a3b95534458366bccab5 c2e00c8226fb6ea78099a408ca55f7585c00ac5c 696c4892dc053e2deaf0604b863832a4f9f6d2196053a3d73f2caf50f29c035f Loading...

	4denemebonusu.com/kralplayer/videojs8/nuevo.min.js	120 kB	2023-11-09	2024-04-26
Pretty URL 4denemebonusu.com/kralplayer/videojs8/nuevo.min.js IP 104.21.13.40 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 23:12:33 Last Seen2024-04-26 20:35:58 Times Seen4 Hash c3c408de4213fcd951e3d412db641db4 748de1461feced4b5c67179eb0db9b15ae5de40d 59cf9db061cc035659af9ced9d94386132911fc2a3c1cd4a1f97dc766229929f Loading...

HTTP Transactions (31)

URL IP Response Size

cdn.ampproject.org/v0/amp-analytics-0.1.js

142.250.74.161

200 OK

32 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-analytics-0.1.js
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, ASCII text, with very long lines (65534)
Size
32 kB (32181 bytes)
Hash
04e1880db4cdd3cbfcbe2b04dd19392e
5546ad89fd2046519affc06959fde666380cee6c
7ae1368f53ed9125d6b81ea2a456c5240e5494ec26124e9d2448bc53443e8f27

HTTP Headers

GET /v0/amp-analytics-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 32181
date: Fri, 26 Apr 2024 18:35:23 GMT
expires: Fri, 26 Apr 2024 18:35:23 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "8abac515a1dc14dc"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-carousel-0.1.js

142.250.74.161

200 OK

12 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-carousel-0.1.js
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (38603)
Size
12 kB (11505 bytes)
Hash
8cd77496ff43a3b95534458366bccab5
c2e00c8226fb6ea78099a408ca55f7585c00ac5c
696c4892dc053e2deaf0604b863832a4f9f6d2196053a3d73f2caf50f29c035f

HTTP Headers

GET /v0/amp-carousel-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 11505
date: Fri, 26 Apr 2024 18:35:23 GMT
expires: Fri, 26 Apr 2024 18:35:23 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "192c4e325910d26e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-sidebar-0.1.js

142.250.74.161

200 OK

9.6 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-sidebar-0.1.js
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, ASCII text, with very long lines (31247)
Size
9.6 kB (9646 bytes)
Hash
faa6d28df6d92df3e3a283cb48ad06f8
d156ad9927ed90c0a4e10d24201b1d221495f848
a8aa12f4db04964e0ebcc49a4fc965e0002d7a214fe2745c5c7ea88e5f4e7148

HTTP Headers

GET /v0/amp-sidebar-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 9646
date: Fri, 26 Apr 2024 18:35:23 GMT
expires: Fri, 26 Apr 2024 18:35:23 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "0e86908e1c35cf48"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0.js

142.250.74.161

200 OK

73 kB

URL GET HTTP/2
cdn.ampproject.org/v0.js
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64654)
Size
73 kB (73093 bytes)
Hash
93b22676750227c6081037abf8baa351
d3c33bea647267cd0fef7c24d1431c40409b74b5
53da1339a0555a71431c0bbfb2bf946f300ee9d5fc2e5b9e0b424c93a2506a82

HTTP Headers

GET /v0.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 73093
date: Fri, 26 Apr 2024 18:35:23 GMT
expires: Fri, 26 Apr 2024 18:35:23 GMT
cache-control: private, max-age=3000, stale-while-revalidate=1206600
etag: "224c86d2f329f14e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-iframe-0.1.js

142.250.74.161

200 OK

8.9 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-iframe-0.1.js
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, ASCII text, with very long lines (25617)
Size
8.9 kB (8937 bytes)
Hash
689f72db85571da6288f3f5a5f607959
f337c57c89f1ae35f0e41ce2784b5a83a19662ba
8be07463f59242dc397373ea3929039cca1d7c3cf7cad14c9213fc356b324f59

HTTP Headers

GET /v0/amp-iframe-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 8937
date: Fri, 26 Apr 2024 18:35:23 GMT
expires: Fri, 26 Apr 2024 18:35:23 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "279148c2c8d43f1b"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-lightbox-0.1.js

142.250.74.161

200 OK

8.5 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-lightbox-0.1.js
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, ASCII text, with very long lines (26547)
Size
8.5 kB (8509 bytes)
Hash
d156272ec438cc4f6b395e84d2ed5ab6
88d9cc75f304601bbe0048e616c669ba0fd4757e
be1685cbf62af0bc6f3673c7dd9ad16cbbf4b7b70686925408c6cecc0522b09f

HTTP Headers

GET /v0/amp-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 8509
date: Fri, 26 Apr 2024 18:35:23 GMT
expires: Fri, 26 Apr 2024 18:35:23 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "dbcc8c1ea6142dc7"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-anim-0.1.js

142.250.74.161

200 OK

2.5 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-anim-0.1.js
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, ASCII text, with very long lines (6054)
Size
2.5 kB (2478 bytes)
Hash
cd53a756737229fe1a2180522f7e64d5
8c06ab9ad66a6b44e139f691125d074e5f95ad90
46db8c368bdeb8474bfe22e868330f405d9c37c43be84c21bc2ee744efb26af6

HTTP Headers

GET /v0/amp-anim-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 2478
date: Fri, 26 Apr 2024 18:35:23 GMT
expires: Fri, 26 Apr 2024 18:35:23 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "c45245a201f4ad75"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

netspor.zip/images/favicon.png

172.67.155.87

200 OK

553 B

URL GET HTTP/3
netspor.zip/images/favicon.png
IP
172.67.155.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectnetspor.zip
Fingerprint12:A3:F1:14:51:E7:B1:65:72:EB:35:27:6C:2D:3E:B6:63:AE:1B:7A
ValidityTue, 19 Mar 2024 20:59:31 GMT - Mon, 17 Jun 2024 20:59:30 GMT

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
553 B (553 bytes)
Hash
f124fab5aeb0c6fabcb7339b40b28d64
96baa2f1f7bf9e30c6c48427e4a0137633686e6e
70b933f8068f1fd5d087f17de9ce502af4197f51a5e3cb3a9bc9bcbfb74dfdc1

HTTP Headers

GET /images/favicon.png HTTP/1.1
Host: netspor.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:24 GMT
content-type: image/png
content-length: 553
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 18:20:51 GMT
last-modified: Wed, 09 Aug 2023 20:25:02 GMT
cf-cache-status: HIT
age: 871
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vRYn%2FxPK1IW5YIwKdalpK8CgpIRV3GCmHVOVR9uaf5QgsG9F25t1NFGn74insZBTgOON07ojoSiBFZUyqGadlnw9zvb6noyMuT9yJIXLncMuXOeooajFPgVXjQKm2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8ac28da4b568e-OSL
alt-svc: h3=":443"; ma=86400

netspor.zip/images/favicon.png

172.67.155.87

200 OK

553 B

URL GET HTTP/3
netspor.zip/images/favicon.png
IP
172.67.155.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectnetspor.zip
Fingerprint12:A3:F1:14:51:E7:B1:65:72:EB:35:27:6C:2D:3E:B6:63:AE:1B:7A
ValidityTue, 19 Mar 2024 20:59:31 GMT - Mon, 17 Jun 2024 20:59:30 GMT

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
553 B (553 bytes)
Hash
f124fab5aeb0c6fabcb7339b40b28d64
96baa2f1f7bf9e30c6c48427e4a0137633686e6e
70b933f8068f1fd5d087f17de9ce502af4197f51a5e3cb3a9bc9bcbfb74dfdc1

HTTP Headers

GET /images/favicon.png HTTP/1.1
Host: netspor.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:24 GMT
content-type: image/png
content-length: 553
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 18:20:51 GMT
last-modified: Wed, 09 Aug 2023 20:25:02 GMT
cf-cache-status: HIT
age: 871
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e1Ztv61zgD5jmX359OR6D1PzSi2ZkDS6GrzaShNls5gfOSjqZS9HI8ynOnGDvdnFnZWpltCif8UeN5A3YkjaNlz0CBRjeOpC9z%2F35pi0%2FCyju%2F7rVUrdmgGKHJk%2Fiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8ac28da49568e-OSL
alt-svc: h3=":443"; ma=86400

netspor.zip/images/netspor.webp

172.67.155.87

200 OK

5.1 kB

URL GET HTTP/3
netspor.zip/images/netspor.webp
IP
172.67.155.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectnetspor.zip
Fingerprint12:A3:F1:14:51:E7:B1:65:72:EB:35:27:6C:2D:3E:B6:63:AE:1B:7A
ValidityTue, 19 Mar 2024 20:59:31 GMT - Mon, 17 Jun 2024 20:59:30 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp
Size
5.1 kB (5086 bytes)
Hash
f4ef83d6b964b361bce75359dd5c0584
ec97b55a86a1f9ace4bf74fa405301627ea67e6d
6878dc7edd72ab3864f286547255b7bfa49d6858fef41afc162ec65252661a61

HTTP Headers

GET /images/netspor.webp HTTP/1.1
Host: netspor.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:24 GMT
content-type: image/webp
content-length: 5086
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 18:20:51 GMT
last-modified: Wed, 09 Aug 2023 20:25:02 GMT
cf-cache-status: HIT
age: 871
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y5lCaJlzHY10%2FcUuao7ZJ4h9kc6uwuv7%2BAKqxZny3HVbuwl%2BTxrb3dDBZt3NKzEAGtWEdKpt119rlRpLjWEbD%2BtW3ApoNHLtJzIT%2Ff1KL6xvzjXcYlZl2JnCw1VAdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8ac28fa7d568e-OSL
alt-svc: h3=":443"; ma=86400

netspor.zip/images/logo.png

172.67.155.87

200 OK

14 kB

URL GET HTTP/3
netspor.zip/images/logo.png
IP
172.67.155.87:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectnetspor.zip
Fingerprint12:A3:F1:14:51:E7:B1:65:72:EB:35:27:6C:2D:3E:B6:63:AE:1B:7A
ValidityTue, 19 Mar 2024 20:59:31 GMT - Mon, 17 Jun 2024 20:59:30 GMT

File type
PNG image data, 183 x 45, 8-bit/color RGBA, non-interlaced
Size
14 kB (13839 bytes)
Hash
3d2e080464f5830853488b147ed48997
90b121261113004ad5953acde26ac03322de096d
f817adb465247d9aead1b73f68713ac6a1e5de3a90ff30d9b2d1f2d2f4dc22a3

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: netspor.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:24 GMT
content-type: image/png
content-length: 13839
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 18:20:50 GMT
last-modified: Wed, 09 Aug 2023 20:25:02 GMT
cf-cache-status: HIT
age: 872
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qf5kDZeKHPO7al97qrKBhbteaQFDUwzmaShptAXsY1tHN2JLScDyUK9eG60WtqVjjMQNtOr3A8dFsofXik0TuaKp4fcAQ%2FywLP2pzaBKBaxETTGimucXdBadmgfovQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8ac28fa78568e-OSL
alt-svc: h3=":443"; ma=86400

cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js

142.250.74.161

200 OK

3.0 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, ASCII text, with very long lines (7690)
Size
3.0 kB (2974 bytes)
Hash
bd778223dafaed0894e021593ad5dcbf
ef1a45e18a85060334571cdc9eaf1e9435b5ffe9
2b753b9c13fe907246062aa577f7837fbd2ffebe71dec501c4cd6de494016ac8

HTTP Headers

GET /rtv/012404091947000/v0/amp-auto-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://netspor.zip
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 2974
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 18:03:29 GMT
expires: Thu, 24 Apr 2025 18:03:29 GMT
cache-control: public, max-age=31536000
etag: "dfcaaf971da6dba2"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 174716
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js

142.250.74.161

3.9 kB

URL
cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js
IP
142.250.74.161:0
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint13:C7:40:78:3B:C5:3E:4C:BF:6E:15:DC:37:54:F1:48:24:A2:83:80
ValidityMon, 08 Apr 2024 06:40:27 GMT - Mon, 01 Jul 2024 06:40:26 GMT

File type
JavaScript source, ASCII text, with very long lines (12614)
Size
3.9 kB (3935 bytes)
Hash
c62cd4c81f0172d7ac84d15281d3fa09
8a966261eaadac311a2d6ae4f32942883911ec01
1f5211c3d83be6fa51f5b9face5beda901221f2a6cf261acb3bbf47d89594126

HTTP Headers

GET /rtv/012404091947000/v0/amp-loader-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://netspor.zip
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 3935
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:53:13 GMT
expires: Sat, 26 Apr 2025 05:53:13 GMT
cache-control: public, max-age=31536000
etag: "14ee94e1b9693284"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 45732
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

4denemebonusu.com/mobil/sitem.js

104.21.13.40

200 OK

0 B

URL GET HTTP/3
4denemebonusu.com/mobil/sitem.js
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /mobil/sitem.js HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/live/izle/stream1.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/javascript
content-length: 0
last-modified: Thu, 14 Mar 2024 19:18:17 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6492
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EZ7U5s8kwDwI6Cl1%2FWCqAZt64pild5YUytH91wzi%2FsQcbohP9qNogFDm6txhrmLakH9hnsDov%2FzOHFTmti%2Fv7boodsb89gUPmRugwzt76H%2B%2B7scJDvMzNH073iDrVyS8Nvo5Qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8ac2a2e0ab4fd-OSL
alt-svc: h3=":443"; ma=86400

4denemebonusu.com/live/izle/stream1.html

104.21.13.40

9.3 kB

URL
4denemebonusu.com/live/izle/stream1.html
IP
104.21.13.40:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type
data
Size
9.3 kB (9333 bytes)
Hash
9370ed91bc2d1860ead35e0991a6352a
f81ab9b699370a38d4537f622188da61cdcc227e
459c94c7583990e1cde5cb36aaf104be0a7eb860c80c3f9a6e4d42a0f94ef103

HTTP Headers

GET /live/izle/stream1.html HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/html
location: https://4denemebonusu.com/live/izle/stream1.php
cache-control: no-cache, no-store, must-revalidate, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JevzQAIhha5Ir7NMLLcEvgmogjhg6nMvM23Z0qY7xNXdVdUG%2FvGqkb7Rq12hQl2O0T%2BgOUhJ2pcNDjpRFdsiRMqEidRBfLZ72xZdbWgY%2F8oWN6oMnZbSyRM1oGdShbUSwl4Mig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8ac291bd5b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

4denemebonusu.com/live/izle/stream1.php

104.21.13.40

10 kB

URL
4denemebonusu.com/live/izle/stream1.php
IP
104.21.13.40:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type
JavaScript source, ASCII text
Size
10 kB (10229 bytes)
Hash
9f2180f5930dabb132eaead5440b0a6d
26d12d83b1b28c642fb04eabac7d309d548a6aad
26db1c68babf1941a73b115ed09aa8d0f8a5aa390f7450af363bc2247bb2e524

HTTP Headers

GET /live/izle/stream1.php HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netspor.zip/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/html; charset=UTF-8
x-litespeed-cache: hit
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FL1xm8W5wUesraKoKibZOsOO%2FSaq1lXLn%2FJhZyX8exEe3ljV5D876DJPhBAZ4BOB3S8VY0q4pVnURhvL8%2Bo4qD51CwEF%2Ffc%2BoAtPP8jGXcPrlojlagcVgy8QDl4M6jAmXbbShg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a8ac297c6eb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js

142.250.74.138

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js
IP
142.250.74.138:443
ASN
#15169 GOOGLE

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (31154 bytes)
Hash
641dd14370106e992d352166f5a07e99
eda46747c71d38a880bee44f9a439c3858bb8f99
a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af

HTTP Headers

GET /ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31154
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:52:36 GMT
expires: Sat, 26 Apr 2025 05:52:36 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 04 Apr 2023 03:27:01 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 45769
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgo2R3vO9KW-1KmznGCO0dQtIsyvDqm0t3CdH5-cm0J-C-Qs1t_fYox1oMIrqu47ob2p133P_A2DuNT1q3J3RbHWhEbc4UGZgdOgsYwt41zVavCe4bmov-YQu0wR9FkFtqZmUf7mwjxcmG3EdzAdB3QM2FKXx6pwlrlH0eb_jVukYKUbraYnRDuHrJU1txc/s1600/Logo-Light%201.png

142.250.74.97

200 OK

8.8 kB

URL GET HTTP/2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgo2R3vO9KW-1KmznGCO0dQtIsyvDqm0t3CdH5-cm0J-C-Qs1t_fYox1oMIrqu47ob2p133P_A2DuNT1q3J3RbHWhEbc4UGZgdOgsYwt41zVavCe4bmov-YQu0wR9FkFtqZmUf7mwjxcmG3EdzAdB3QM2FKXx6pwlrlH0eb_jVukYKUbraYnRDuHrJU1txc/s1600/Logo-Light%201.png
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintD1:64:F1:6B:AC:65:FC:D3:5F:42:54:08:AE:BC:0A:AC:D1:EA:88:2C
ValidityMon, 08 Apr 2024 07:27:47 GMT - Mon, 01 Jul 2024 07:27:46 GMT

File type
PNG image data, 544 x 128, 8-bit/color RGBA, non-interlaced
Size
8.8 kB (8759 bytes)
Hash
0d68acca9f9c85310b099d353298a55e
104f22402901ad39c0356c01c2a7e657e83ef5e0
3356af817f6e76e25e9c8e65d9629c546f0601064d156213600cad6b2f6515f9

HTTP Headers

GET /img/b/R29vZ2xl/AVvXsEgo2R3vO9KW-1KmznGCO0dQtIsyvDqm0t3CdH5-cm0J-C-Qs1t_fYox1oMIrqu47ob2p133P_A2DuNT1q3J3RbHWhEbc4UGZgdOgsYwt41zVavCe4bmov-YQu0wR9FkFtqZmUf7mwjxcmG3EdzAdB3QM2FKXx6pwlrlH0eb_jVukYKUbraYnRDuHrJU1txc/s1600/Logo-Light%201.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v207f"
expires: Sat, 27 Apr 2024 18:35:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Logo-Light 1.png"
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 18:35:25 GMT
server: fife
content-length: 8759
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh802AxM2N6MzI3REY7O-mxzl7tgjIK7j1J0GeojfjfU0LR4u5-5lxHiEJBLNv3cbIFzZ2ylxKb0cFtO7soH244aVFhFIurOTs1axG1rH74mRgIxRdM7seHqiwaMPzTAE7r61jPNih5-uyBi6GmntcKhmmL54V9IYyxhJJ1hZp3UeBCca02gPQaDr6bPdiU/s1600/betistnewlogo.png

142.250.74.97

200 OK

71 kB

URL GET HTTP/2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh802AxM2N6MzI3REY7O-mxzl7tgjIK7j1J0GeojfjfU0LR4u5-5lxHiEJBLNv3cbIFzZ2ylxKb0cFtO7soH244aVFhFIurOTs1axG1rH74mRgIxRdM7seHqiwaMPzTAE7r61jPNih5-uyBi6GmntcKhmmL54V9IYyxhJJ1hZp3UeBCca02gPQaDr6bPdiU/s1600/betistnewlogo.png
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintD1:64:F1:6B:AC:65:FC:D3:5F:42:54:08:AE:BC:0A:AC:D1:EA:88:2C
ValidityMon, 08 Apr 2024 07:27:47 GMT - Mon, 01 Jul 2024 07:27:46 GMT

File type
PNG image data, 1600 x 550, 8-bit/color RGBA, non-interlaced
Size
71 kB (70745 bytes)
Hash
ddd2525639f321e275fe49359116bb6c
9e5a8f80a019584a77985732ca1716ab8721725f
8f3e2ebdcd2c17c78ffac6204fbcee36db7c64b87f9b7e537b596a187fefab6e

HTTP Headers

GET /img/b/R29vZ2xl/AVvXsEh802AxM2N6MzI3REY7O-mxzl7tgjIK7j1J0GeojfjfU0LR4u5-5lxHiEJBLNv3cbIFzZ2ylxKb0cFtO7soH244aVFhFIurOTs1axG1rH74mRgIxRdM7seHqiwaMPzTAE7r61jPNih5-uyBi6GmntcKhmmL54V9IYyxhJJ1hZp3UeBCca02gPQaDr6bPdiU/s1600/betistnewlogo.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v2084"
expires: Sat, 27 Apr 2024 18:35:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="betistnewlogo.png"
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 18:35:25 GMT
server: fife
content-length: 70745
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipXQ-VRBYG_J15fZT8zNcjbzteTEnJosAO8m7IQXHbHTjtp6hsk6Cs_o7pmTyL8cpx8pfjUW16k0Wk6CVomg7pSTp20-Avr6xFUMa2v8cM7vqZ2u8aYCR6cD6nK8h2b4jgcTijSAhr-Y7T9Lv8IU7DBKmIsr-I4ELuFnwT66kxKbENzhPaiT4qFYMGYSR1/s1600/Logo-Light.png

142.250.74.97

200 OK

7.0 kB

URL GET HTTP/2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipXQ-VRBYG_J15fZT8zNcjbzteTEnJosAO8m7IQXHbHTjtp6hsk6Cs_o7pmTyL8cpx8pfjUW16k0Wk6CVomg7pSTp20-Avr6xFUMa2v8cM7vqZ2u8aYCR6cD6nK8h2b4jgcTijSAhr-Y7T9Lv8IU7DBKmIsr-I4ELuFnwT66kxKbENzhPaiT4qFYMGYSR1/s1600/Logo-Light.png
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintD1:64:F1:6B:AC:65:FC:D3:5F:42:54:08:AE:BC:0A:AC:D1:EA:88:2C
ValidityMon, 08 Apr 2024 07:27:47 GMT - Mon, 01 Jul 2024 07:27:46 GMT

File type
PNG image data, 505 x 109, 8-bit/color RGBA, non-interlaced
Size
7.0 kB (6968 bytes)
Hash
2b32eac485c2c8032b366e4c1c3601b9
ccf7b44ae0f3c2a247b6bc97373df5dae4987300
8d98ce35fcf0519d183660aa7fef9fdff7bde7544c5ce08fed62ed28705a34e6

HTTP Headers

GET /img/b/R29vZ2xl/AVvXsEipXQ-VRBYG_J15fZT8zNcjbzteTEnJosAO8m7IQXHbHTjtp6hsk6Cs_o7pmTyL8cpx8pfjUW16k0Wk6CVomg7pSTp20-Avr6xFUMa2v8cM7vqZ2u8aYCR6cD6nK8h2b4jgcTijSAhr-Y7T9Lv8IU7DBKmIsr-I4ELuFnwT66kxKbENzhPaiT4qFYMGYSR1/s1600/Logo-Light.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v2084"
expires: Sat, 27 Apr 2024 18:35:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Logo-Light.png"
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 18:35:25 GMT
server: fife
content-length: 6968
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGY7cZX1BeHS7bnjxJv3tWsgeGLI-eH3azJq1PPlN2Ao2KSimMg-Fse5qOJH-pAyuCvFuKGg_5ELDR5z3ZvaXkJVeZCQd0FJrZzjrw8_PrULxGo6VTOJw0d1PKmEorZV6nDh0j-tuh1dJy7C6mmSy0L5KlfnKc-sSMpil7oSd-l-W0Vrmyh1zhgVBka4jk/s1600/betorlogog_ncel.png

142.250.74.97

200 OK

70 kB

URL GET HTTP/2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGY7cZX1BeHS7bnjxJv3tWsgeGLI-eH3azJq1PPlN2Ao2KSimMg-Fse5qOJH-pAyuCvFuKGg_5ELDR5z3ZvaXkJVeZCQd0FJrZzjrw8_PrULxGo6VTOJw0d1PKmEorZV6nDh0j-tuh1dJy7C6mmSy0L5KlfnKc-sSMpil7oSd-l-W0Vrmyh1zhgVBka4jk/s1600/betorlogog_ncel.png
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintD1:64:F1:6B:AC:65:FC:D3:5F:42:54:08:AE:BC:0A:AC:D1:EA:88:2C
ValidityMon, 08 Apr 2024 07:27:47 GMT - Mon, 01 Jul 2024 07:27:46 GMT

File type
PNG image data, 1600 x 390, 8-bit/color RGBA, non-interlaced
Size
70 kB (70010 bytes)
Hash
1b862ed5de6f0fce424e903659fa165a
82e0d53aa789b08092ad9d83b8be6fd2f640f3af
f1eb96852d38fab819d1523392f9d7ba411ff8952753005f0f0ec9d68d21fcea

HTTP Headers

GET /img/b/R29vZ2xl/AVvXsEgGY7cZX1BeHS7bnjxJv3tWsgeGLI-eH3azJq1PPlN2Ao2KSimMg-Fse5qOJH-pAyuCvFuKGg_5ELDR5z3ZvaXkJVeZCQd0FJrZzjrw8_PrULxGo6VTOJw0d1PKmEorZV6nDh0j-tuh1dJy7C6mmSy0L5KlfnKc-sSMpil7oSd-l-W0Vrmyh1zhgVBka4jk/s1600/betorlogog_ncel.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v2084"
expires: Sat, 27 Apr 2024 18:35:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="betorlogog_ncel.png"
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 18:35:25 GMT
server: fife
content-length: 70010
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4ABS0Z2QCl4g6Bj8vtSOPwhlfgUhczBYeEK1QEejXlk32wycgwkSnJeYUdyKRfeJF1S1i8Fo0mpz8OrAdz5zjCQnaefa0HoFRJveR0uYMkSR2ZuIIioh4B5Q-ve9CC1NyJj2aQzP0yod7ljOn7g9pSzufpcrhxfa58rnC0PdKP0ljjONRa0xxAvSpIrG-/s1600/Logo-Dark-2x.png

142.250.74.97

200 OK

13 kB

URL GET HTTP/2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4ABS0Z2QCl4g6Bj8vtSOPwhlfgUhczBYeEK1QEejXlk32wycgwkSnJeYUdyKRfeJF1S1i8Fo0mpz8OrAdz5zjCQnaefa0HoFRJveR0uYMkSR2ZuIIioh4B5Q-ve9CC1NyJj2aQzP0yod7ljOn7g9pSzufpcrhxfa58rnC0PdKP0ljjONRa0xxAvSpIrG-/s1600/Logo-Dark-2x.png
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://netspor.zip/
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintD1:64:F1:6B:AC:65:FC:D3:5F:42:54:08:AE:BC:0A:AC:D1:EA:88:2C
ValidityMon, 08 Apr 2024 07:27:47 GMT - Mon, 01 Jul 2024 07:27:46 GMT

File type
PNG image data, 348 x 64, 8-bit/color RGBA, non-interlaced
Size
13 kB (13206 bytes)
Hash
23675cad56b39ac222edbb1370adfc60
6d366b2ed6d588c1251fcec859b31e465000c345
1224f6a93f4e1176e553d15a32ec8668c2c8226eb62a61635750e1eca4ce8295

HTTP Headers

GET /img/b/R29vZ2xl/AVvXsEh4ABS0Z2QCl4g6Bj8vtSOPwhlfgUhczBYeEK1QEejXlk32wycgwkSnJeYUdyKRfeJF1S1i8Fo0mpz8OrAdz5zjCQnaefa0HoFRJveR0uYMkSR2ZuIIioh4B5Q-ve9CC1NyJj2aQzP0yod7ljOn7g9pSzufpcrhxfa58rnC0PdKP0ljjONRa0xxAvSpIrG-/s1600/Logo-Dark-2x.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v2080"
expires: Sat, 27 Apr 2024 18:35:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Logo-Dark-2x.png"
x-content-type-options: nosniff
date: Fri, 26 Apr 2024 18:35:25 GMT
server: fife
content-length: 13206
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

4denemebonusu.com/sayac.html

104.21.13.40

200 OK

7.9 kB

URL GET HTTP/3
4denemebonusu.com/sayac.html
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type
JavaScript source, ASCII text
Size
7.9 kB (7922 bytes)
Hash
0fadf742a64e27e82e930c9004e69460
f15ecaf670ab7ff8b846beecdf1de6e28d73130a
c8000ff24c43ada5cba00ba0171ec02a761a36434cd431f22a6c07b175fa7206

HTTP Headers

GET /sayac.html HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/live/izle/stream1.php
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/html
last-modified: Sun, 24 Dec 2023 17:46:30 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6491
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vo6vBga4d%2FFw61PyQHszKUppajiIbXD3NIZWZo38JTzpGhntOtBJmcvJCRgy76dhUHeSKhCdxtpddsGY%2FrJfUZ7k9h6%2FvxPb6FTzMDEHkYcmZZNFP%2F%2Fsvmow12KXWDRWNLCtAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a8ac2e7da4b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

4denemebonusu.com/kralplayer/videojs8/lang/tr.js

104.21.13.40

200 OK

7.0 kB

URL GET HTTP/3
4denemebonusu.com/kralplayer/videojs8/lang/tr.js
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type
Unicode text, UTF-8 text, with very long lines (7660), with no line terminators
Size
7.0 kB (7038 bytes)
Hash
969c50f424a0ef251294c98b8f0d4902
84845c818645c95c4f6d8af83da545140e7968f8
915bcf4d65683551d3ef69133627a8a95785c758afe50b46a821b0b2c090de9e

HTTP Headers

GET /kralplayer/videojs8/lang/tr.js HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/live/izle/stream1.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/javascript
last-modified: Wed, 16 Aug 2023 23:59:08 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f7OLcGezUBaL%2BjVffsCoKuXnq7QK2dOFthyHOs5QRlN41DuCHw%2B7LOwXDEy7LkHBmxGGRk2aLCUJN%2BZLw3cALkFfdFoc6QUMdww9OFhLYosdbDqQEa4DB%2BqbELSX7Br%2FSoEw5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a8ac2a3e59b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

4denemebonusu.com/kralplayer/videojs/plugins/vastpro.js

104.21.13.40

200 OK

136 kB

URL GET HTTP/3
4denemebonusu.com/kralplayer/videojs/plugins/vastpro.js
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type
JavaScript source, ASCII text, with very long lines (65404)
Size
136 kB (135662 bytes)
Hash
c76bcf146de77cf58cbb7e4f22fe8524
0d8e726f905862b030db64d6f1696d821ebfb2a9
85c6c66cc9f32b45c788b9e02d237fd00115ca9466cee45915c2d3d9e2d52386

HTTP Headers

GET /kralplayer/videojs/plugins/vastpro.js HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/live/izle/stream1.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/javascript
last-modified: Wed, 16 Aug 2023 20:45:58 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BRVz8z7Ge2nWkn4q%2BsZ7L3%2BC4ZmkCO0hntuxSZ6%2FYczxCbZ4p6T6sj8gNbj0QcHjc%2FWh5rYEIHHAc9JgsAxHCY6wP0qW6HGt3pxlSf0rJiQ0zfJNGmlHi1KW59N4q1Ac5P1dmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a8ac2a3e56b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

m3u8.mehmetkucukeksi.workers.dev/yayintaso.m3u8

0.0.0.0

0 B

URL GET
m3u8.mehmetkucukeksi.workers.dev/yayintaso.m3u8
IP
0.0.0.0:0
ASN
#0

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /yayintaso.m3u8 HTTP/1.1
Host: m3u8.mehmetkucukeksi.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://4denemebonusu.com
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

4denemebonusu.com/kralplayer/videojs8/skins/flow/videojs.min.css

104.21.13.40

200 OK

78 kB

URL GET HTTP/3
4denemebonusu.com/kralplayer/videojs8/skins/flow/videojs.min.css
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type
Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size
78 kB (77487 bytes)
Hash
6b6e877ae7914021b6d2b44353aafb65
daf1a562515e1aa1a8963e69ef7e394a6525f6fe
1386bca2b789f00bf23614711bdf646a3d597988dc82a4d7acd61e885ea9e834

HTTP Headers

GET /kralplayer/videojs8/skins/flow/videojs.min.css HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/live/izle/stream1.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 16:47:12 GMT
last-modified: Sun, 20 Aug 2023 23:05:48 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 6492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DVs8VTe8EUljPa0upaSn1qfNcaneF6kPy%2FUaGEJ%2F1nKNBtgKCWaovlqwhcBOVRS%2FRm6GKnPrpfC12TH%2BBHGeSGIYy0K82AP7tofEEePBrA2duKIQioeRtT0fzsq50yzR5BiTRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a8ac2a3e52b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

4denemebonusu.com/live/izle/stream1.html

104.21.13.40

302 Found

5.6 kB

URL GET HTTP/2
4denemebonusu.com/live/izle/stream1.html
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netspor.zip/
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type

Size
5.6 kB (5625 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /live/izle/stream1.html HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netspor.zip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/html
location: https://4denemebonusu.com/live/izle/stream1.php
cache-control: no-cache, no-store, must-revalidate, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JevzQAIhha5Ir7NMLLcEvgmogjhg6nMvM23Z0qY7xNXdVdUG%2FvGqkb7Rq12hQl2O0T%2BgOUhJ2pcNDjpRFdsiRMqEidRBfLZ72xZdbWgY%2F8oWN6oMnZbSyRM1oGdShbUSwl4Mig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8ac291bd5b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

4denemebonusu.com/kralplayer/videojs8/video.min.js

104.21.13.40

200 OK

562 kB

URL GET HTTP/3
4denemebonusu.com/kralplayer/videojs8/video.min.js
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type

Size
562 kB (561638 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /kralplayer/videojs8/video.min.js HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/live/izle/stream1.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/javascript
last-modified: Fri, 18 Aug 2023 15:25:28 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wjNB6fQtFM6a1p89RTXnbMetS%2BPbrBFR5L1rbu1IEr772lLj8BsX6f83EsxgV8clRo4C1aImJluJZgMjVXLad74DpVSMMCVg8efzqp1931k2A1IMYp910%2FM%2F9CToTrlc8HZ5TA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a8ac2a3e53b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

4denemebonusu.com/kralplayer/videojs8/nuevo.min.js

104.21.13.40

200 OK

120 kB

URL GET HTTP/3
4denemebonusu.com/kralplayer/videojs8/nuevo.min.js
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://4denemebonusu.com/live/izle/stream1.php#amp=1
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type
JavaScript source, ASCII text, with very long lines (1266)
Size
120 kB (120068 bytes)
Hash
c3c408de4213fcd951e3d412db641db4
748de1461feced4b5c67179eb0db9b15ae5de40d
59cf9db061cc035659af9ced9d94386132911fc2a3c1cd4a1f97dc766229929f

HTTP Headers

GET /kralplayer/videojs8/nuevo.min.js HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4denemebonusu.com/live/izle/stream1.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/javascript
last-modified: Fri, 18 Aug 2023 15:33:32 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RdAEfOe5c29BgRa0JQHRwDm0W7uUbnVfRNVg1nudTOoUhs%2Fn1x70nBxscz5KVsv%2BV5KH60FlygsiQnuozGY5AG1pDbMY1ODd6n33efWmPo%2BW1%2FMo2hDGi%2FcAbKcGHLzYp2bSwA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a8ac2a3e55b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

4denemebonusu.com/live/izle/stream1.php

104.21.13.40

200 OK

5.6 kB

URL GET HTTP/2
4denemebonusu.com/live/izle/stream1.php
IP
104.21.13.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netspor.zip/
Certificate
IssuerLet's Encrypt
Subject4denemebonusu.com
FingerprintBA:0E:97:9D:21:82:50:43:92:D7:16:B7:F3:6E:2C:BB:CD:B8:73:E7
ValiditySat, 16 Mar 2024 15:14:24 GMT - Fri, 14 Jun 2024 15:14:23 GMT

File type
JavaScript source, ASCII text, with very long lines (5998), with no line terminators
Size
5.6 kB (5625 bytes)
Hash
71336ef250f067d2b2a7289528495ff1
164262f6d155d650e08fcfea0dbaaca6b33e768b
5dc22719db27580ee48aeeae5866f5f9a675c32b83ee622b98039a61b3b10dd2

HTTP Headers

GET /live/izle/stream1.php HTTP/1.1
Host: 4denemebonusu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netspor.zip/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:35:25 GMT
content-type: text/html; charset=UTF-8
x-litespeed-cache: hit
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FL1xm8W5wUesraKoKibZOsOO%2FSaq1lXLn%2FJhZyX8exEe3ljV5D876DJPhBAZ4BOB3S8VY0q4pVnURhvL8%2Bo4qD51CwEF%2Ffc%2BoAtPP8jGXcPrlojlagcVgy8QDl4M6jAmXbbShg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a8ac297c6eb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (21)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML