Susp_Dropper (Kaspersky), Gen:Variant.MSILPerseus.58052 (AdAware), SpyTool.Win32.Ardamax.FD, GenericEmailWorm.YR (Lavasoft MAS)Behaviour: Worm, EmailWorm, SpyTool
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 3b5191070b3b7a2c0be8ee8435612110
SHA1: 0178ee9ce73a14644da961f98ff83ba13571c984
SHA256: 6ff9ae213e4c676484b18433b20e67d628a9a023b0e61de0d0f56ca4cbe18bc3
SSDeep: 49152:7A i5iuJNYXgifHLoL3wuyWdON d8QY9W6/PhaG8O0h3rV nzzGyr19q3a:85i0iXgdLA4LfJjhbV nzzbr
Size: 2793984 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2004-08-04 09:01:37
Analyzed on: Windows7 SP1 32-bit
Summary: Worm. A program that is primarily replicating on networks or removable drives.
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
EmailWorm | Worm can send e-mails. |
Process activity
The Worm creates the following process(es):
Gerenciador de Janelas do Windows.exe:2300
%original file name%.exe:2472
Server.exe:1912
netsh.exe:3984
CSRKPR~1.EXE:1968
The Worm injects its code into the following process(es):
22.exe:1804
CDT.exe:2840
svchost.exe:816
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process Gerenciador de Janelas do Windows.exe:2300 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02 (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.00 (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe (148 bytes)
The process %original file name%.exe:2472 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\22.exe (6813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\CSRKPR~1.EXE (38124 bytes)
The process Server.exe:1912 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe (48 bytes)
The process 22.exe:1804 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-165x110[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\widget.min[1].js (835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\scripts[1].js (4614 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\errorPageStrings[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\iconx2-000000[1].png (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery-ui.min[1].css (1070 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery.nicescroll.min[1].js (38922 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sxx (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\navcancl[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery.themepunch.tools.min[1].js (62820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-367x245[1].jpg (1468 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_06731334455765A6F34A82BF39D6CF43 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D9857FC63DFE9755C5BDB0D042694121 (2618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\comment-reply.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[1].swf (125294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\b0d3c416d0b77963f7715cf086a6160a[1].png (4512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ajax-loader[1].gif (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\jquery.inview.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\hS2LLdHn7TpvEb4tLPbgig[1].eot (3844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\f[2].txt (34591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\5f47a8220dd01fa7ff45bdb7a1caedd5[1].png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\mouse.min[1].js (894 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\widget.min[2].js (3726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FG3KEJ98.txt (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\11750400935445842881[1].gif (20620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\css[1].css (313 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\theia-sticky-sidebar.min[1].js (2488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\draggable.min[1].js (9202 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\nm_mc_style[1].css (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\PA3S2ON2.txt (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D9857FC63DFE9755C5BDB0D042694121 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (650 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TWK0F2IG.txt (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\font-awesome-extended.min[1].css (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\register.min[1].css (875 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\farming-simulator-17-hayvancilik[1].htm (10755 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\jquery.themepunch.revolution.min[1].js (34044 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC545.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\scripts.min[1].js (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\all.min[1].js (92305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\CDMJDZXU.txt (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\platform[1].js (23491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_right_white_36dp[1].png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\restore.sxx (58 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\U9ZYZBQ1.txt (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player-vflQvtU5W[1].css (151201 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62 (4272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\settings[1].css (10846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\wp-1469792536870-273x182[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\wp-1469155132742-165x110[1].jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC514.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\waypoints.min[1].js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\keyboard_arrow_left_white_36dp[1].png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\keyboard_arrow_right_white_36dp[1].png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\base[1].js (642664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1FTWOSZM.txt (549 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\Tren-Raylarında-Telefon-Şarj-367x245[1].jpg (3817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\Farming-Simulator-17-Hayvancılık-Rehberi-273x182[1].jpg (1084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_left_white_36dp[1].png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\zrt_lookup[1].htm (4679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\farming-simulator-17-Domuzlar[1].jpg (10520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\b0d3c416d0b77963f7715cf086a6160a[1].png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\QUBHI6GC.txt (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\googlelogo_dark_color_84x28dp[1].png (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery[1].js (64921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\Farming-Simulator-17-[1].jpg (5840 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_7DB7D6E4C2F91DB8BDD95A3986E262BB (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-367x245[1].jpg (2089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0QDCGE26.txt (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Avatar-2-165x110[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (1752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\f[1].txt (42375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-1470457551614-273x182[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Bedava-İnternet-Paketleri-165x110[1].jpg (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\zMZWJ0mPeKR6nQmYkwSS0vh35EUeMMG430EhqEnDKeI[1].js (11309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\ErrorPageTemplate[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\crossdomain[1].xml (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\styles.min[1].css (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery-migrate.min[1].js (6611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\conditional[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.autotype.min[1].js (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\f[1].txt (106958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\wp-embed.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\activeview[1].gif (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\vc_lte_ie9.min[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_1714C264F1EEE35EE58F120EEC6E50E6 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\styles[1].css (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\f[1].txt (27540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\11a138d4cd2c71069b982a474c6c2f1d[1].png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\teknogezgini-logo[1].png (2783 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D27E7DAD333CAF9C7988E4EC059F1607 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\bullet[1] (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-1469511914476-273x182[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Po-xXyh4cpm8TTuJGV1cyy5S0CjDLt-FLNVratqIZds[1].js (12672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-emoji-release.min[1].js (7075 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\httpErrorPagesScripts[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ajax[1].js (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC513.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\lq8Mim-yTjM[1].htm (5174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\foundation-icons[1].css (5376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\12303209505774623573[1].png (14873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-1[1].css (76657 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\s[1].htm (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\videostats.sxx (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\3KAd02OzFSDbt78HTOt2og[1].eot (12244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\dialog.min[1].js (3829 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\soundData.sxx (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_A66C1C8F8B3BCD472CAB0DCA995D3AA1 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\5dff6dff908a697dfcc3c0331bc44ee8[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MJJNZGEI.txt (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\fontawesome-webfont[1].eot (29081 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\ca-pub-9074486242767801[1].js (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\xt_likes[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\register.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ad_status[1].js (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\admin-ajax[1].htm (307 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\font-awesome.min[1].css (15152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player[1].js (79837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\tablet-sifre-kırma-reset-165x110[1].jpg (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.form.min[1].js (11565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\crossdomain[1].xml (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.tweet.min[1].js (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\login.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\hqdefault[1].jpg (19717 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\x_button_blue2[1].png (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\HObEGlw4O0E[1].htm (5222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\BS3FDFYX.txt (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\background_gradient[1] (453 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ads[1].htm (13799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\WMZUWJRG\teknogezgini[1].xml (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A66C1C8F8B3BCD472CAB0DCA995D3AA1 (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-165x110[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_06731334455765A6F34A82BF39D6CF43 (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\xt_likes[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-3[1].css (51704 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_1714C264F1EEE35EE58F120EEC6E50E6 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ads[2].htm (15685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_54C9C52DFDD32B624E0E814C661C9F19 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_7DB7D6E4C2F91DB8BDD95A3986E262BB (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\position.min[1].js (1639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\hqdefault[1].jpg (4690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[2].swf (121437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min[1].css (235985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\xt-socialshare.min[1].js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WDRP0NRC.txt (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC544.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\login.min[1].css (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\Farming-Simulator-17-İnekler[1].png (37820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\jquery.visible.min[1].js (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\button.min[1].js (2733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-2[1].css (97587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\default[1].css (2134 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_54C9C52DFDD32B624E0E814C661C9F19 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\modernizr.min[1].js (14715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\widget.min[1].js (2251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\info_48[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\OZDIKCNB\www.youtube[1].xml (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\core.min[1].js (2359 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\galleria-1.4.2.min[1].js (41963 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D27E7DAD333CAF9C7988E4EC059F1607 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\resizable.min[1].js (8261 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\f[2].txt (46288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\7e5cc5fb8d2fd78d5ec9412ea4ffc50f[1].png (1 bytes)
The Worm deletes the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player-vflQvtU5W[1].css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player[1].js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FG3KEJ98.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\crossdomain[1].xml (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC514.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\activeview[1].gif (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\keyboard_arrow_left_white_36dp[1].png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\keyboard_arrow_right_white_36dp[1].png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1FTWOSZM.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_left_white_36dp[1].png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC513.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[2].swf (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WDRP0NRC.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC544.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\videostats.sxx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0QDCGE26.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TWK0F2IG.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\soundData.sxx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC545.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\base[1].js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MJJNZGEI.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_right_white_36dp[1].png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\restore.sxx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\U9ZYZBQ1.txt (0 bytes)
The process CSRKPR~1.EXE:1968 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe (268667 bytes)
The process CDT.exe:2840 makes changes in the file system.
The Worm creates and/or writes to the following file(s):
C:\ProgramData\XKQ\CDT.004 (4972 bytes)
Registry activity
The process Gerenciador de Janelas do Windows.exe:2300 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"
The Worm deletes the following value(s) in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
The process %original file name%.exe:2472 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
To automatically run itself each time Windows is booted, the Worm adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"wextract_cleanup0" = "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\"
The process Server.exe:1912 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
"AutoDetect" = "1"
[HKCU]
"di" = "!"
The Worm deletes the following value(s) in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
The process 22.exe:1804 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\teknogezgini.net]
"(Default)" = "24"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"EnableConsoleTracing" = "0"
[HKLM\SOFTWARE\Microsoft\AudioCompressionManager\DriverCache\msacm.l3acm]
"cFormatTags" = "2"
"aFormatTagCache" = "01 00 00 00 10 00 00 00 55 00 00 00 1E 00 00 00"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"FileTracingMask" = "4294901760"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"MaxFileSize" = "1048576"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"ConsoleTracingMask" = "4294901760"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad]
"WpadLastNetwork" = "{24C5EDBC-2851-452A-B521-5DA992F6C1B5}"
[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\Total]
"(Default)" = "91578"
[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com]
"(Default)" = "6"
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1483395295"
[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadDecision" = "3"
"WpadDecisionTime" = "F0 69 00 4E D4 6D D2 01"
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "22.exe"
[HKLM\SOFTWARE\Microsoft\AudioCompressionManager\DriverCache\msacm.l3acm]
"cFilterTags" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-e1-da-d8]
"WpadDecision" = "3"
[HKLM\SOFTWARE\Microsoft\AudioCompressionManager\DriverCache\msacm.l3acm]
"fdwSupport" = "1"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"FileDirectory" = "%windir%\tracing"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-e1-da-d8]
"WpadDecisionReason" = "1"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"EnableFileTracing" = "0"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"EnableFileTracing" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 36 00 00 00 09 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"ConsoleTracingMask" = "4294901760"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadNetworkName" = "Network 2"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"EnableConsoleTracing" = "0"
"FileDirectory" = "%windir%\tracing"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASMANCS]
"MaxFileSize" = "1048576"
[HKLM\SOFTWARE\Microsoft\Tracing\22_RASAPI32]
"FileTracingMask" = "4294901760"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadDecisionReason" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 09 00 00 00 09 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-e1-da-d8]
"WpadDecisionTime" = "F0 69 00 4E D4 6D D2 01"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Worm deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
"ProxyBypass"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
The process netsh.exe:3984 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"
[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E\@%SystemRoot%\system32]
"napipsec.dll,-4" = "1.0"
"eapqec.dll,-103" = "Microsoft Corporation"
"tsgqec.dll,-100" = "RD Gateway Quarantine Enforcement Client"
"tsgqec.dll,-103" = "Microsoft Corporation"
"napipsec.dll,-1" = "IPsec Relying Party"
"napipsec.dll,-2" = "Provides IPsec based enforcement for Network Access Protection"
"napipsec.dll,-3" = "Microsoft Corporation"
"eapqec.dll,-100" = "EAP Quarantine Enforcement Client"
"eapqec.dll,-101" = "Provides Network Access Protection enforcement for EAP authenticated network connections, such as those used with 802.1X and VPN technologies."
"tsgqec.dll,-101" = "Provides RD Gateway enforcement for NAP"
"eapqec.dll,-102" = "1.0"
"dhcpqec.dll,-101" = "Provides DHCP based enforcement for NAP"
"dhcpqec.dll,-100" = "DHCP Quarantine Enforcement Client"
"dhcpqec.dll,-103" = "1.0"
"dhcpqec.dll,-102" = "Microsoft Corporation"
"tsgqec.dll,-102" = "1.0"
The process CSRKPR~1.EXE:1968 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"
The Worm deletes the following value(s) in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
The process CDT.exe:2840 makes changes in the system registry.
The Worm creates and/or sets the following values in system registry:
To automatically run itself each time Windows is booted, the Worm adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CDT Start" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe"
Dropped PE files
MD5 | File path |
---|---|
a47463d5eb3261169b6d216579b0ceb5 | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe |
b2f682de6f40f6917b3db2a2e8cd1253 | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\22.exe |
7d7a865c06dd16081a8568e0d8c29d7c | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\CSRKPR~1.EXE |
fd4d5c819fe5a9f8b40d18c7d914c5cd | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe |
b1936b29dd260e0dc7d46a09df4134da | c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01 |
c1df4e6fe747f2bdc8561b089804efad | c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02 |
6a8ce42b097c7a3fdce00acf554a1c48 | c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe |
fd4d5c819fe5a9f8b40d18c7d914c5cd | c:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
Gerenciador de Janelas do Windows.exe:2300
%original file name%.exe:2472
Server.exe:1912
netsh.exe:3984
CSRKPR~1.EXE:1968 - Delete the original Worm file.
- Delete or disinfect the following files created/modified by the Worm:
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02 (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.00 (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\22.exe (6813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\CSRKPR~1.EXE (38124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-165x110[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\widget.min[1].js (835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\scripts[1].js (4614 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\errorPageStrings[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\iconx2-000000[1].png (530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery-ui.min[1].css (1070 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery.nicescroll.min[1].js (38922 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sxx (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\navcancl[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery.themepunch.tools.min[1].js (62820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-367x245[1].jpg (1468 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_06731334455765A6F34A82BF39D6CF43 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D9857FC63DFE9755C5BDB0D042694121 (2618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\comment-reply.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[1].swf (125294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\b0d3c416d0b77963f7715cf086a6160a[1].png (4512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ajax-loader[1].gif (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\jquery.inview.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\hS2LLdHn7TpvEb4tLPbgig[1].eot (3844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\f[2].txt (34591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\5f47a8220dd01fa7ff45bdb7a1caedd5[1].png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\mouse.min[1].js (894 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\widget.min[2].js (3726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FG3KEJ98.txt (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\11750400935445842881[1].gif (20620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\css[1].css (313 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\theia-sticky-sidebar.min[1].js (2488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\draggable.min[1].js (9202 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\nm_mc_style[1].css (439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\PA3S2ON2.txt (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D9857FC63DFE9755C5BDB0D042694121 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (650 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TWK0F2IG.txt (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\font-awesome-extended.min[1].css (661 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\register.min[1].css (875 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\farming-simulator-17-hayvancilik[1].htm (10755 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\jquery.themepunch.revolution.min[1].js (34044 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC545.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\scripts.min[1].js (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\all.min[1].js (92305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\CDMJDZXU.txt (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\platform[1].js (23491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_right_white_36dp[1].png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\restore.sxx (58 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\U9ZYZBQ1.txt (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (539 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player-vflQvtU5W[1].css (151201 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62 (4272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\settings[1].css (10846 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\wp-1469792536870-273x182[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\wp-1469155132742-165x110[1].jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarC514.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\waypoints.min[1].js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\keyboard_arrow_left_white_36dp[1].png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\keyboard_arrow_right_white_36dp[1].png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\base[1].js (642664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1FTWOSZM.txt (549 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\Tren-Raylarında-Telefon-Şarj-367x245[1].jpg (3817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\Farming-Simulator-17-Hayvancılık-Rehberi-273x182[1].jpg (1084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\keyboard_arrow_left_white_36dp[1].png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\zrt_lookup[1].htm (4679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\farming-simulator-17-Domuzlar[1].jpg (10520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\b0d3c416d0b77963f7715cf086a6160a[1].png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\QUBHI6GC.txt (631 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\googlelogo_dark_color_84x28dp[1].png (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery[1].js (64921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\Farming-Simulator-17-[1].jpg (5840 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_7DB7D6E4C2F91DB8BDD95A3986E262BB (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-367x245[1].jpg (2089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0QDCGE26.txt (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Avatar-2-165x110[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (1752 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\f[1].txt (42375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-1470457551614-273x182[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Bedava-İnternet-Paketleri-165x110[1].jpg (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\zMZWJ0mPeKR6nQmYkwSS0vh35EUeMMG430EhqEnDKeI[1].js (11309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\ErrorPageTemplate[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\crossdomain[1].xml (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\styles.min[1].css (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\jquery-migrate.min[1].js (6611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\conditional[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.autotype.min[1].js (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\f[1].txt (106958 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\wp-embed.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\activeview[1].gif (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\vc_lte_ie9.min[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_1714C264F1EEE35EE58F120EEC6E50E6 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\styles[1].css (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\f[1].txt (27540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\11a138d4cd2c71069b982a474c6c2f1d[1].png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\teknogezgini-logo[1].png (2783 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_D27E7DAD333CAF9C7988E4EC059F1607 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\bullet[1] (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-1469511914476-273x182[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\Po-xXyh4cpm8TTuJGV1cyy5S0CjDLt-FLNVratqIZds[1].js (12672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\wp-emoji-release.min[1].js (7075 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\httpErrorPagesScripts[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ajax[1].js (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC513.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\lq8Mim-yTjM[1].htm (5174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\foundation-icons[1].css (5376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\12303209505774623573[1].png (14873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-1[1].css (76657 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\s[1].htm (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\videostats.sxx (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\3KAd02OzFSDbt78HTOt2og[1].eot (12244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\dialog.min[1].js (3829 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NBXZ88BJ\s.ytimg.com\soundData.sxx (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_A66C1C8F8B3BCD472CAB0DCA995D3AA1 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\5dff6dff908a697dfcc3c0331bc44ee8[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MJJNZGEI.txt (260 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\fontawesome-webfont[1].eot (29081 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\ca-pub-9074486242767801[1].js (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\xt_likes[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\register.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ad_status[1].js (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\admin-ajax[1].htm (307 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\font-awesome.min[1].css (15152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\www-embed-player[1].js (79837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\tablet-sifre-kırma-reset-165x110[1].jpg (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.form.min[1].js (11565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\crossdomain[1].xml (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\jquery.tweet.min[1].js (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\login.min[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\hqdefault[1].jpg (19717 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\x_button_blue2[1].png (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\HObEGlw4O0E[1].htm (5222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\BS3FDFYX.txt (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\background_gradient[1] (453 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ads[1].htm (13799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\WMZUWJRG\teknogezgini[1].xml (807 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A66C1C8F8B3BCD472CAB0DCA995D3AA1 (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-165x110[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_06731334455765A6F34A82BF39D6CF43 (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\xt_likes[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-3[1].css (51704 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_1714C264F1EEE35EE58F120EEC6E50E6 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\ads[2].htm (15685 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_54C9C52DFDD32B624E0E814C661C9F19 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_7DB7D6E4C2F91DB8BDD95A3986E262BB (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\position.min[1].js (1639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\hqdefault[1].jpg (4690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\watch_as3[2].swf (121437 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min[1].css (235985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\xt-socialshare.min[1].js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WDRP0NRC.txt (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabC544.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\login.min[1].css (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\Farming-Simulator-17-İnekler[1].png (37820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\jquery.visible.min[1].js (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\button.min[1].js (2733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\style.min-2[1].css (97587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\default[1].css (2134 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_54C9C52DFDD32B624E0E814C661C9F19 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\modernizr.min[1].js (14715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\widget.min[1].js (2251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6N4XLNR\info_48[1] (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\OZDIKCNB\www.youtube[1].xml (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\core.min[1].js (2359 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\galleria-1.4.2.min[1].js (41963 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_D27E7DAD333CAF9C7988E4EC059F1607 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\resizable.min[1].js (8261 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30EV4AVE\f[2].txt (46288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\318DR7NG\7e5cc5fb8d2fd78d5ec9412ea4ffc50f[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe (268667 bytes)
C:\ProgramData\XKQ\CDT.004 (4972 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"wextract_cleanup0" = "rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CDT Start" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: Microsoft Corporation
Product Name: HD Player
Product Version: 6.00.2900.2180
Legal Copyright: (c) Microsoft Corporation. Reservados todos los derechos.
Legal Trademarks:
Original Filename: WEXTRACT.EXE
Internal Name: Wextract
File Version: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
File Description: Win32 Cabinet Self-Extractor
Comments:
Language: Language Neutral
Company Name: Microsoft CorporationProduct Name: HD Player Product Version: 6.00.2900.2180Legal Copyright: (c) Microsoft Corporation. Reservados todos los derechos.Legal Trademarks: Original Filename: WEXTRACT.EXE Internal Name: Wextract File Version: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)File Description: Win32 Cabinet Self-Extractor Comments: Language: Language Neutral
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 39212 | 39424 | 4.55071 | 4e87890fefdd18aef9a1aa26fdf11116 |
.data | 45056 | 7140 | 1024 | 2.94449 | 99858e86526942a66950c7139f78a725 |
.rsrc | 53248 | 2752012 | 2752512 | 5.52931 | baf4e86be20c9de434ec6e377063d2fe |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/easy-foundation-shortcodes/styles/foundation-icons.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/likes/css/xt_likes.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/fontawesome/css/font-awesome.min.css?ver=4.7.1 | 5.2.85.61 |
hxxp://googleadapis.l.google.com/css?family=Roboto:300,400|Exo:700,300,400&subset=latin-ext&ver=1482346734 | |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/social-share/font-awesome/css/font-awesome-extended.min.css?ver=4.7.1 | 5.2.85.61 |
hxxp://pagead46.l.doubleclick.net/pagead/js/adsbygoogle.js | |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/social-share/skins/default.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/jquery-ui.min.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/styles.min.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/login.min.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/assets/common/css/styles.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/goodnews/style.min.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/goodnews/style.min-1.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/goodnews/style.min-2.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/goodnews/style.min-3.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/xt-mailchimp/nm_mc_style.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/jquery.js?ver=1.12.4 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/assets/xt_twitter/widget.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/js_composer_5.0.1/assets/css/vc_lte_ie9.min.css | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/02/teknogezgini-logo.png | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/wp-emoji-release.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/register.min.css?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/xt-galleria/galleria/galleria-1.4.2.min.js?ver=1.4.2 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/advanced-news/assets/widget.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/assets/common/js/conditional.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/widgets/assets/xt_twitter/jquery.tweet.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/xt-mailchimp/js/ajax.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2017/01/Tren-Raylarında-Telefon-Şarj-367x245.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/10/fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-367x245.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/10/ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-367x245.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/10/Farming-Simulator-17-Hayvancılık-Rehberi-273x182.jpg | 5.2.85.61 |
hxxp://gstaticadssl.l.google.com/s/roboto/v15/3KAd02OzFSDbt78HTOt2og.eot | |
hxxp://2.gravatar.com/avatar/b0d3c416d0b77963f7715cf086a6160a?s=300&d=monsterid&r=g | 192.0.73.2 |
hxxp://2.gravatar.com/avatar/b0d3c416d0b77963f7715cf086a6160a?s=60&d=monsterid&r=g | 192.0.73.2 |
hxxp://2.gravatar.com/avatar/11a138d4cd2c71069b982a474c6c2f1d?s=60&d=monsterid&r=g | 192.0.73.2 |
hxxp://teknogezgini.net/wp-content/uploads/2016/08/wp-1470457551614-273x182.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/07/wp-1469792536870-273x182.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/10/farming-simulator-17-Domuzlar.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/10/Farming-Simulator-17-.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/10/Farming-Simulator-17-İnekler.png | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/07/wp-1469511914476-273x182.jpg | 5.2.85.61 |
hxxp://gstaticadssl.l.google.com/s/exo/v4/hS2LLdHn7TpvEb4tLPbgig.eot | |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/fontawesome/fonts/fontawesome-webfont.eot?v=4.4.0 | 5.2.85.61 |
hxxp://pagead46.l.doubleclick.net/pagead/js/r20170109/r20170110/show_ads_impl.js | |
hxxp://e6845.dscb1.akamaiedge.net/crls/secureca.crl | |
hxxp://2.gravatar.com/avatar/7e5cc5fb8d2fd78d5ec9412ea4ffc50f?s=60&d=monsterid&r=g | 192.0.73.2 |
hxxp://2.gravatar.com/avatar/5dff6dff908a697dfcc3c0331bc44ee8?s=60&d=monsterid&r=g | 192.0.73.2 |
hxxp://2.gravatar.com/avatar/5f47a8220dd01fa7ff45bdb7a1caedd5?s=60&d=monsterid&r=g | 192.0.73.2 |
hxxp://teknogezgini.net/wp-content/uploads/2016/10/fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-165x110.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/11/Avatar-2-165x110.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/07/wp-1469155132742-165x110.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2015/12/tablet-sifre-kırma-reset-165x110.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/02/Bedava-İnternet-Paketleri-165x110.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/uploads/2016/10/ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-165x110.jpg | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/likes/js/xt_likes.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/jquery-inview/jquery.inview.min.js | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/button.min.js?ver=1.11.4 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/position.min.js?ver=1.11.4 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/social-share/js/xt-socialshare.min.js?ver=1.0.0 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 | 5.2.85.61 |
hxxp://e8218.dscb1.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== | |
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/resizable.min.js?ver=1.11.4 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/dialog.min.js?ver=1.11.4 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 | 5.2.85.61 |
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEg0aOXToYEC | |
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGUhZOTmlkeE | |
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF1gScbx3zO7 | |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/scripts.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/login.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/login-register/assets/register.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/comment-reply.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/modernizr/modernizr.min.js | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/plugins/js_composer_5.0.1/assets/lib/waypoints/waypoints.min.js?ver=5.0.1 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/jquery-nicescroll/jquery.nicescroll.min.js | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/sticky-sidebar/js/theia-sticky-sidebar.min.js | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/jquery-autotype/jquery.autotype.min.js | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/vendors/jquery-visible/jquery.visible.min.js | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/assets/js/all.min.js?ver=1.0 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-includes/js/wp-embed.min.js?ver=4.7.1 | 5.2.85.61 |
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAgBmA6zq94/ | |
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF2/N6VaC7pu | |
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEcaE/6VYJXK | |
hxxp://teknogezgini.net/wp-admin/admin-ajax.php?action=refresh_likes&post_id=693 | 5.2.85.61 |
hxxp://teknogezgini.net/wp-content/themes/goodnews/lib/modules/social-share/img/ajax-loader.gif | 5.2.85.61 |
hxxp://teknogezgini.net/wp-admin/admin-ajax.php?lang= | 5.2.85.61 |
hxxp://youtube-ui.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGihEWzZk01n | |
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEg0aOXToYEC | 172.217.20.174 |
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAgBmA6zq94/ | 172.217.20.174 |
hxxp://1.gravatar.com/avatar/11a138d4cd2c71069b982a474c6c2f1d?s=60&d=monsterid&r=g | 192.0.73.2 |
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGihEWzZk01n | 172.217.20.174 |
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEcaE/6VYJXK | 172.217.20.174 |
hxxp://fonts.googleapis.com/css?family=Roboto:300,400|Exo:700,300,400&subset=latin-ext&ver=1482346734 | 216.58.214.202 |
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF2/N6VaC7pu | 172.217.20.174 |
hxxp://crl.geotrust.com/crls/secureca.crl | 23.43.133.163 |
hxxp://pagead2.googlesyndication.com/pagead/js/r20170109/r20170110/show_ads_impl.js | 172.217.20.162 |
hxxp://fonts.gstatic.com/s/exo/v4/hS2LLdHn7TpvEb4tLPbgig.eot | 172.217.20.195 |
hxxp://g.symcd.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== | 23.43.139.27 |
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF1gScbx3zO7 | 172.217.20.174 |
hxxp://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 172.217.20.162 |
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGUhZOTmlkeE | 172.217.20.174 |
hxxp://1.gravatar.com/avatar/7e5cc5fb8d2fd78d5ec9412ea4ffc50f?s=60&d=monsterid&r=g | 192.0.73.2 |
hxxp://fonts.gstatic.com/s/roboto/v15/3KAd02OzFSDbt78HTOt2og.eot | 172.217.20.195 |
googleads.g.doubleclick.net | 216.58.209.66 |
www.google.com | 173.194.113.209 |
cm.g.doubleclick.net | 173.194.113.217 |
www.youtube.com | 172.217.20.174 |
s.ytimg.com | 216.58.209.174 |
i.ytimg.com | 216.58.209.174 |
www.gstatic.com | 216.58.209.67 |
habbogerador.ddns.net | 200.236.238.24 |
static.doubleclick.net | 173.194.113.220 |
apis.google.com | 172.217.20.174 |
tpc.googlesyndication.com | 216.58.209.33 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /wp-content/plugins/easy-foundation-shortcodes/styles/foundation-icons.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:44:35 GMT
Content-Type: text/css
Content-Length: 4021
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
............K....... ...mX3=o{.H.E...&H6A6....[.eQ.....=.z.}.V..]...^..{j^}{xq....0..r..?.T.>...o_.....Gw........vxs....<M..W...c......-.Ncj.Usm...L..~.......}...]...........)kw.............4..~$$....<._..|I......K...o......k...o.......s]..Gw,....ipw.|G._..../.iDK...4x.d.4...]<>..J/....:q.T....._.?..O.>=n...R....q.o/^.l|Q......Bx.T9zE....u.dJ../..Nn.T.Lw...LM..\K.r...}}.....S99..X...-...8.Ko.T.w0....,...m..z...U..}.........E.........}4.d*"}..Ve..vM...........u..?.^.....^q..F_.Ou....X...g..*].z.>.....t.\h.kKB\....~|.h*@j,}kop..T.../...2. .&..N-....Xj..j}.u*..g..~.B9.....r..u44.^..k.i....!..V.C..-<..M...K...gs/[./3..V.......5.2h}(Mg..e....F=....iFs.c.....m.6...Nh.,.2j... .;.,.a..<......_8q.ytHN....>...p.m...H....rSt..P...~v.~..u..d..7..^....................UA..Z.n..../...c..m7my..44.1.P.....Yp..."x....X...2=|-....!]..I....W..N#....3u......]9...o"...>.N_.<u.{u..nS7n....w4.......#.Z1.N..-.(......em.....T[ s. .`.zR...N?.R...h..q)..T....G.T./o....$]y.i..>...#SGWP.-= #.[=#......&2...;.....y..r.4~.fg...@c.._ZK.U.5.>C.....&`*}..y7G...}._.....0*.]x....;.'.}.)...e...G.?..g...|.Z.Ka.f..Z.....\.[]..5n8.e.z....Ece.......N~0.Zj.....fu.....Z/.R...O.H5.......h...j.r6..P.U.P>.Fe....y..Q.s......#...i.rfH;W....q.........-&3;...........i.gO e.}...kZ...V:N/`.........z......F..NE.j* ...H.X.)_.......M .d.kt.X.f-......)1..X.i.si..x..O...|4..g..~!..0.A.2..ZA G.).yn..Z.....P..-....zu.U..P...Wt%-....k.....g..l..**w..:{....{H.N'.....D_....iJ.%....4.../ix......?.1|..}UU..o1.]y_.....o.=.1m.r.8.6.F
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/login-register/assets/jquery-ui.min.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:54 GMT
Content-Type: text/css
Content-Length: 1615
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........X.R.8.../.T.V.8.`..y...}....yPl...X.K&......X.I.......:.}....'..B6Ds-.....R.Y...J...6....h...*....T.=o....6 e..`.?...d.pw..e.f.M..Vr./.C..,......2...lyU..Xq......eo..-K....v.....6..%..Y!X.s...t.x..P......Y....m.... ..@.Z.......U`..... eO....0Z*...E.}.=.......^.F...rZk..K0.ku~.^.^....c.....#.H.-.8h..........V..q.3.?..1..5.WO...x.p.=.......^Zvh..,X...eGK...5..].Ct[z.......s........U.r......t..7..d.ik...>#..]..x.......|b=.t..Rlh...rh .....[.F....0Mp...x..y..6...A..o=...'K.q.li[.....LI....AU....).NO$t...n.tz...0..kx...(..1....wG..B>{.>...0h0r.s.....KQ.K.Nk.{G.....d1 ....^.....<{/f.V.M...GR..FM.,.....c....T.....A...oA.....\.a.(...0....QI.z.....X..#.^C}..1..JYe..4..hc\.N.W..DMr.....gk.K.........?&.<K......W.H`....PB.&=Q..6G..s...S....'........&.c;(..,. .X....k...Fb...7n.".....I........8.... .8.._......KUO..s.9W.@..q...=....QK....K6..l.1..4...0`t<.6vI).....zm.z.......>.......... .]c.p.?.Ur... ;.B6...".z...w.fCo..>.....j...g^....}.o}.Ot.vA.R.A...V|P9...qv)..w..\.>]..u.9g...,....Kgv...l..}.....c....r'....P'p&.$.zq.....\..yW.y'.hT...H.NvC.....L?'.|T.9.5s..*mx}K.B.L.!......}J........N.t...y....CtHV&N...9%n..-.....|7...v..v....w...f: ;t./..m7.xB1.....1.g..Xr,......./&...%M.f......v5.gg...=...."....d...S?w.......AjW...q.kz.2Y.Yp.(D...qa1%,X..&.d'.......sg.O~.2||....OkUU.E.6 ....%m.]@.._.d.....;...i.......kU...r.R..HB.7|...#...]..[................b.......K|..4...}.....S1%...E.;......#./2.....p*H...p....X>..'.....LVw_...B....nV........5^.c:..*."..K..W.....P=.u..../?...c..x..........w..
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/widgets/assets/common/css/styles.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:26:31 GMT
Content-Type: text/css
ntCoent-Length: 91
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Vary: Accept-Encoding
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 105
............A.. .@...Bp...Ez.m&...-2..g..... .1P..(T(x............cnVp.......F......`1..5..B"....n...[.......
GET /wp-content/uploads/goodnews/style.min-1.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Fri, 28 Oct 2016 22:01:46 GMT
Content-Type: text/css
Content-Length: 25838
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
.............sc..(.Wx....Dd..h..V^..8..M%..a....y$.C.Z...U.._?.n<..53v.Of....F...h..._Oo...............~...lo..W..vx.....&.f..n....bx..n....f.];lf..o.....g..7.....R.x...{.m....d|.......=h6.Y{0k..|.9.._O...|..?.....j.m..7m3...^....n...`..>..S......w....n...\.V.W...l.:.6.....n..^....khq.@...|....u.l5.a.._/'....Z.4Y....=...W..7.....`n.........|6k...l.[`g.z.........,g....{.......4... .....yX.o.........|.h.y.\.A....v..........vv.xy.......7...j.U..%.n....d..NN/.o....:9jo/TI..........,..]]./...j=.l<...m...A....9<n....;C.....H.ATw....8Y. '..EU.Hj......S`......PtDe..k...l...46Y..=.@y^-Vo&...G.0..C.....-.d.0.]}..}.V>_^OP.. ,....>=....Xs.]]<NW`...g`..........]-W`... .uA......Z........~{....8.....f.v...<.N.....["1...T%.9|=../.`....}.AN.y.Z.. q...:.......]..g\...fP.a......v;.......]......&r1._o...Vs..Z....v.l..90.......W...F...LH.W...f8_.....yy...f6C......5.%..YH..sz.N_.U$]]7.|...^..}{.."........7...S.z.../."} ...<.x... ...h.7 ..MY....y.~.k,(...=...Uz.L..s.....].:]E.......jY./6a....*...f.....M../....x....1...xt......y.E{..gJk../......5.......[.p!6...h.6-8...B..]...vv..y.<....tt....a.>o......_..NFg.|.......rqO.~.Z...6.u.....|.....6....l~..4g...r6..........}...."..D.m../.@....,.}.'..#O...I.M.l..>..9m.m3l....<B;\6.-M.N<W.b.......^..(V{....'.-x...h..e..c...W..0Ue......p.%vL.............0qY...........:.@....F....G4...Cf....w...F...[.Z..w.P..1.Yw .fVK.........{...ms.w.F.@.`....-L.3..%.fu.-......N.......n..6.a........f;.?}..CX...}5....j.VMg......O...]h(N>..MA....x.u...1....C....,.&.....
<<< skipped >>>
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Fri, 14 Oct 2016 12:09:50 GMT
Content-Type: application/javascript
Content-Length: 39407
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
............iw#....~>..k(.Y.Z...."....dk...eH.......H..E.......T..J..{.s.#..Z.r..="..lo]......zs...t....V....?..N..r<....F..g...d. ..r....l.n.=.h.Y.u..u/.........l.u5..N...G^....g...........z.W.t..R..a.]5......U..r4.....o.^...y...5/on..r.Ul..O..y;^....7Z..ry;.n.J..m...F]........p.w.O{9./..C...b...O..~....{..MW6..7...e6...v1.F\......l...g..x.9{........Q........../.g.....n...4.w..F31..L.|.....f../.g...._~....O..wWk.....k..]-.....`.yz./.~=o....|sc]z..k...X.....Z......r&(......2&`......y{.-....e..M..p9j.f....y..Z....U.. &....u...eU.......v^t.O..J.....w........zeZ.W..wY.RK.e$W.|XZ.Z.0.f *.a...o..s......wK..7Y.> ....NX.}..v..u..7.....7.^q.>....zqB.7k<.J.[.k.X..K.U\.......?.....*....d....7.C.L..,.wD..... ..;Y......M-e.}..z.....pg.{.....i...}z......z'..Z......g...0[...l`~........>..........u\.7.p"......."L....j.N..G.....)X`..x <...&e1...pg.y..k..|e........V.....K.[.Us..i.z...o..v...:....GT..u;.YV.;...Z.W.k<.*[E><...J.~..y.S.vv..V.......P...n./l.....4..........e...Z.v|..eo.?5O.n...L2.......C.. .......5. >.d...Ec.y..u........j....I. ..g/...F ././.....aV..T0...S"...l.l............C.:....m.#...o...*...G..B....?........;;E..r$N.}....{.O.&e..H..ar...cK.]..E..dV,......U....^.wP..j.....h..`/...:..._.c.Z.m....\....._.fB..p3..U--...\.4 D...}..h.5...V.&.."}Y.M.....F..=...>....{.}.?{;.\..6Zm".b/..t..h;..h..UR.>....*..h% .)v..v.....Lc.............'|.V#.{..r2....o.I.(.RW.....X.?.l....7._/.(. o.6...._.g.......j. .U..z.5`_..........7..|,........`.Jt...5{...Ml...R..@...c.s!.........r.;......I.KS.
<<< skipped >>>
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sat, 22 Oct 2016 09:41:26 GMT
Content-Type: application/javascript
Content-Length: 15707
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........}k{.F........LZ E..IHSZ.I..ubo...Y..."!.1.h.P.,.....S7....{fz/...(....S.........y.....iy5.O...|..N.ezQ,.uV....N....`.....$.;.E.....9Xd..dG.."- 4.w..F....`4.<.....m...2 ..vw1.|.A_..N.N.N.:.w..3.|.-.e}...8......n......ct.Ev...]G.*.Tu...h....A..N.y...c..$........y.H.....c......"}.^..j.d..'.EVeG."..L..G.'.....'.._..?.f.!>)..e6.O...y(O.ivrZ.....Y....a....!*........:O.QU'.<)...urU,.q.FQ|.\,.fe.....W.M...,.......7...zs|\..."..,O.q.../..0.O../.s..y.:;...P../....@..<...E..,N.....c.R...y-...Q\......(. )9M..%...5p....{..E..&uR...n..E.......x{...,.. .N.......,.|[...:.9...(.t..qt.d.A6z..&e...?..)......(.}...Y....l...y../<|. }..T.C.@Uvv...../,<....(.~..5.......2@1.........5...%.O>..kA...B...h...........a..i.d.?y.?..O..@.??...._?.....<...evR..4....,.....8>..N.`2..<...u.f..E~..r>..V._...G'.@....,*....ljd...,........gEY.r..X...'8[.Y.C.m.%%.-.../.g...0!.........u6[/...,w......w.|...}.....j...V........y*g.....)..G.M.........CV5....U.NRTI}...(A...d..)..."..|..'.8!..>..T.gc.F.\d':............@..p.....<...B...X,.MI...%7...Kgu..(......Ybu.....UuZ,.c`...*.>Z..x......hQ.>..}.9........,.q..... ...%.....L."M.p..`.*i......xh.x...9..0k....[...gX{./.c..S.]|.n.G.l......1.........%.........@...?...[....{...".}.....l.T.4.....~v......]...P.......6.O.gGy...nC...GD.{-......29?.14gm.(.%.bQ.....)./r..H...#3.g5Zge1..z.......m.....7l3.@......Er...%.|t/...?. 9.o......n..(......Tr..O....@A..`u/.;....6....>n..{.d.|..8..Ae......Y..wz.<.....5....\.y'..........'=..........n.t.]..M...,..4.x6x{;..
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/widgets/assets/common/js/conditional.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sat, 22 Oct 2016 09:26:26 GMT
Content-Type: application/javascript
Content-Length: 628
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........T.n.0.=._...$-..^..../.9(...c..m.J. ....%...lA`....#).....gQ...h.'Uotq.....m....4I.7.......`\..Ma..k.c#V.K.&.[.~pY.....?.-....\........50:....vz=T..-_V...la...2:...QK.CBLW.A*...BP...@.(..o.TI"........F.Q.'6.p...xLBp..K...w...G.|.....i....`...D.I...9.'3.`...DA.O.? ....4.W.g..5#.&UZSc....Y.......>14..u..a:.....`.~S.^...1..J......-ta.s).^.N.......4.1 .[.c^.X......!....*.:........"".B.<.;.7.(Y1.....o..9..HF ...VT.gT..?&N.^..)....../...Yr.e..P.8A.............J7..W.Q...~....B..g.k.?x....../...L...........[.....^"!....d.`.O.8.(.>...,D...,. ,..L17_.8.%..(I*N<......o...fs.. ~.AR.......S.....=....W{.j.nt.>.jI.......9...HTTP/1.1 200 OK..Cache-Control: max-age=2592000 ..Expires: Fri, 20 Jan 2017 19:35:58 GMT..Last-Modified: Sat, 22 Oct 2016 09:26:26 GMT..Content-Type: application/javascript..Content-Length: 628..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:35:58 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive.............T.n.0.=._...$-..^..../.9(...c..m.J. ....%...lA`....#).....gQ...h.'Uotq.....m....4I.7.......`\..Ma..k.c#V.K.&.[.~pY.....?.-....\........50:....vz=T..-_V...la...2:...QK.CBLW.A*...BP...@.(..o.TI"........F.Q.'6.p...xLBp..K...w...G.|.....i....`...D.I...9.'3.`...DA.O.? ....4.W.g..5#.&UZSc....Y.......>14..u..a:.....`.~S.^...1..J......-ta.s).^.N.......4.1 .[.c^.X......!....*.:........"".B.<.;.7.(Y1.....o..9..HF ...VT.gT..?&N.^..)....../...Yr.e..P.8A.............J7..W.Q...~....B..g.k.?x....../...L...........[.....
<<< skipped >>>
GET /wp-content/uploads/2016/10/fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-367x245.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Fri, 28 Oct 2016 20:10:32 GMT
Content-Type: image/jpeg
Content-Length: 22904
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$........o.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.../.jVX0....X.WM.|Gx........ ..a3J....^....<.F..^..=z.]...@...7q.T.Wn>....^n.zar26...W.'.u>......Hnc...8."xe....X...f..:.d....Gn./..3}.]Z]>..t....}Ee.1.k....3M.....--...y.H:........L....&.h......\...=zU\....3..iv...S.|......[(..0...S...4ck.....".R.......i.Y..).. N2.<...3rh.a...:sS..=....Di8..d...*..l...i.u.q..EU.,.k..gg....I..l....T:|.3.T.....|k.......o....<D.`........?.[..I...n.MuF.4..7......!.<.&B.....*..rj\e)_..R..;|..O#....\....i`...^.i......5........A..yv.....-F.....O..b...R].s.F@...W...z...8..w...I.5.\.....6....n..t..k...m..3g59].......a8_C............*kUO.Fd.M.ug;HNVW=K.....z..~@....\.../....r...^..v.iz\.f..z....W...F9.........,...16....=v........#..UU#..V...,U.!i...0....G..^.z.`....5.......> O.....61...~ai..P....e.............O.Q..c...k.o.^...U.0 ...0..^......4..........$d...4....9k..e.. ..1.z..9<.~.....j.
<<< skipped >>>
GET /wp-content/uploads/2016/08/wp-1470457551614-273x182.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Fri, 28 Oct 2016 20:09:41 GMT
Content-Type: image/jpeg
Content-Length: 19454
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....T][O.. ..X}.....^.y...k.......a.*x%_.y.!.!..w9.{.......W%........r...IbH..........^[..,.PQ...@.....u..c.c....X6U=dcizu..#[G$..~i$........Y..$tB]T..8.=qSE$I......W<.>.Z. ..Cd..k.R:..\.....f...2..b>.....K...~........n.co...g.......V)%RX.}..#..D......x.ew.....]..Q..S........../.....e...0...............]68.<.... =~............{.4V......v^2.g...Z.0......[..m...b...x......-r- .{t....,...X...)..s]\].o.."DZF.7..#....T..\J.8`.......v....-.{[cmc5.Z}.'.....7....b....m....^.T..I..;....4g..F....?Z..q^/..4."..<..i....H.....q.W.g...*...jb..B]f...{u.....^...yt.......L....%.......^....Eh.gmk...X3.......q^m.x..M<.@..'9.F...H....J..()...b.U....O....F......G..k.......^..a..g.$f3....v.......M".C....B.f.f.0Te?.q..=.8...'.ShZn.qsb......P&..pq.z...oVK;.r.3N........g...1L.......:.{.WM..l.~"k.ZY}..cGs....1.=;~..wf.#.3m......{...~..|@......"..Ln.
<<< skipped >>>
GET /wp-content/uploads/2016/10/Farming-Simulator-17-İnekler.png HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:59 GMT
Last-Modified: Sun, 30 Oct 2016 21:02:44 GMT
Content-Type: image/png
Content-Length: 562412
Date: Fri, 13 Jan 2017 19:35:59 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
.PNG........IHDR.....................IDATx.....$I.&...k.....L..EWUwUO..N....w...y. .....@..'x$....x......w...........U...U...../.t.f..0...2^Vf...z..e...f.}...../..?......~... .0LS.l...W.....Ba...aZliu7SX..B..o......O..l...R...~....V..L..9...9..e...s.K.U...-M../-Y.u||.qR.T.....[......zx...n.W,...OT.1.r./b.# .J..Z:..6...3%#..o.3.e..e..'..e..~....8V..%.A..!.B.0.!.!......A.>...gl.k..s.@4.-....|.6B..?..|<..C...?GI..1Lv...LoC.y.....O...t.~........W. ..2....f6.....h....O~..nQ..u.........c...q...c...:3.;. hS.V..c..A....C.{.`..........g0h.t..Z1.{S.m....k..y.].............8.o.^9..NX...1`..tOM.b...w....7V .&..E..E.A{;....5..>W.m*..'y....~........M.._K'.......<u|..X<.G.....gA'ap*....... ...s..F2......e..'.-.OX...{..(>...\...W...Z..... .l.....[o...tJ.i...=..eI.(J........`...f.b.z.`......J....,!....C.q,.:::.z.j.L.....O1.........I../...N....;;W...(.......`.@...m[F.c..[.n.....$..:..........Y...!. .q.......AH.>."D...B....F_.j.. .dm%hX/<.}.......O.{...........w>y...R_.hB...<0..ty............A....@.....~..Y..DD.....@5>...*Jr.|..Ba..7.....z...zt..=.q.......)8..$Bp..{...>....5@....;.TDt.}...x...<t......C..'.. ........e.@.mcE1......i... 663.....i..._..7i..(y.................l>...{z...l..l..L~.... ..n...n....0|:...=U../0[[;..n..0...Ok....7.._}.......KR.......v..(c..K.t:...c.!.....B.^#..,t...X....}....c....B..2... ..d...q.r.....#...A...e.x.=,..../....j#.;..X..|{.o.t._.i9.,...B.... #....p...$..F.4.e".7B.Aqv6@.4.L.q._..K.....C.3.t.......0....v....C.... B.....g. 0...8..9.......ihN...Y....r.?.;.\8
<<< skipped >>>
GET /wp-content/uploads/2015/12/tablet-sifre-kırma-reset-165x110.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:04 GMT
Last-Modified: Sat, 22 Oct 2016 10:20:17 GMT
Content-Type: image/jpeg
Content-Length: 7586
Date: Fri, 13 Jan 2017 19:36:04 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................n...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....4g.......K....c.w..[#y...`o\W..~..j......W._.|..x./>.4.Mp6FG. .....W.s3...Ue....m..O... .P..=...<......}_.xCB.....i...>UX.U.B.4..-.NX.D.8.../. .....$........k..y^OC.0XzxXr.k..7.,.M.!.Pm.^.z. ....o...E...%....*....!...Ct$.......|Y.YYX.6..g*...'....N.t..rk....z......Vo...L..L...j.......=B...l.p.!%.'.0..kQ.%(............#....u.`...$...e.X....3.....K.............#vd....\.H..U....f......t_.?..._....M.Q.CE&..%...X..Y..-._.hZ?..ne:...'.Z..w...f.~........Sv....~.&~{........}O.y4..|}...i.x..zkd ..t........_4|T...Y....k...7...l...7......~..._<[.&O.jCT.'.5.......2........W.x/......d. .m.g.....y. z.Q..)..>?..,%..|....z~'=...[...../...o...fi....&..O...7#..<....=..g...W.X.)P.du!...zW.O.o.[........xkQ|.i.(.g.L......v....|4..i.x...^...SPD.q.pVt!........I.<M7...{1..........J....I.S..Cas.].<.\.NrWM.S...&.nQ.F>....O.7....._..F...
<<< skipped >>>
GET /wp-content/themes/goodnews/assets/vendors/jquery-inview/jquery.inview.min.js HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Sat, 22 Oct 2016 09:21:18 GMT
Content-Type: application/javascript
Content-Length: 799
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
..........mT.n.8....(..f.d.n.2^..f..E..3. .F.....@]9.H..^J.S{..u..s..;.........p..M\......[....z...I....z....q....W^....A...Cc.s(@r..5..k..Q=..I..f..f..}..493.5....K..K.V.....&........Q.2..14.oc*..KY...P.6..........F:(..)....;.].$.i..Y.....r. .o.hJP...~..W....Z...W4..M._...i.B.}..%G.&.y....%...T.0hT..r........Z..i.LQp.....>D..H.#...(C.A.a 8.Z..@.....3...........t..A.....FV......B. 2(...JM.\......].z$!....G..L.y...:..f...r........L........M.$....&qQ..d..u..=kn..=...,;..x.t.R.....5.9...(......!.HM/.Q.$.3..I......=.............F(..*..M.......52...X_.6..A.c.|..t2.~$..!..^d...%.Y.D.E{;..F% .h.9...H..m .......{.[vB)a4...:;O..m.......g ..f........mo...|y|"H.(..q....'....^....3...p...._zzk.a...cn..dE?...Q7w`....DE.9Gk..........."..?X.R....Q..]O...u.xx.vvg[.z`7..!..'...Y.%....,..q.O_;./b....<~....HTTP/1.1 200 OK..Cache-Control: max-age=2592000 ..Expires: Fri, 20 Jan 2017 19:36:06 GMT..Last-Modified: Sat, 22 Oct 2016 09:21:18 GMT..Content-Type: application/javascript..Content-Length: 799..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:36:06 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive............mT.n.8....(..f.d.n.2^..f..E..3. .F.....@]9.H..^J.S{..u..s..;.........p..M\......[....z...I....z....q....W^....A...Cc.s(@r..5..k..Q=..I..f..f..}..493.5....K..K.V.....&........Q.2..14.oc*..KY...P.6..........F:(..)....;.].$.i..Y.....r. .o.hJP...~..W....Z...W4..M._...i.B.}..%G.&.y....%...T.0hT..r........Z..i.LQp.....>D..H.#...(C.A.a 8.Z..@.....3.........
<<< skipped >>>
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Fri, 14 Oct 2016 12:10:13 GMT
Content-Type: application/javascript
Content-Length: 1926
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........W.r.F.}.W..-...@2.&6..%Kt.Z[Rd...([.`@.......$.}O...-....*an.=g..i...}.|.|..V.....9.......{F.........i..^..1M g.....U..~..Y, .g..b'.V.p.<....U^.t.F.J.*v........uR...T.....X....q...h.8.a$ ....a.O".b...ozI.E.. ........F....Dg....=..g..]0k....}.Z...m.......P.|{/.G.D,.*..,...\ .....Uq...|Z...2&.%.H.....7.g.%..$P^.s...BoU.d.........Z}.2...e ]...E]*l.............N.z.~?r..s.....lSW....U.J}.(......].~.4....TY. >C8..e...gM.m...#...............M.%:.TQz.......~O._.@.rO..K.../......V:.UF.I/*K.Z.R0cT..z`|..Te.j..^......v/(.Je.K3b{.`..>.Y.._........g.zw}z6......oO.....|.f~;...(..~............n.7.x"...N....?..Wo...G.f.....$.O......<.....d"..7.W....H.\...{_..y...=}......~..~..7..Q....I..E.0.D......6y.....q.dX.i])./......(..........4."3.I...R_..y......u..#{....Q....B..J(........G...fN.._.}b..[...Z.,..TL..~?iRa...)2.....Tq.G..........:.`....."*.QS....6#Af.[.hu..fR......>.I.'l....A.....Z....p.......Z[....F....y...>.....SY.,:..U.....-.[.M.F .J]......s.-..?.....z.#.n$..{.!.........,........!....(.6.=]^.K....E.U2.P.J...($...8.f.&.........q.R..`.(.;eqs........S...j..y.D..p..X0...{.H#......H7b..p.I...$........I.. ..4...L.....O.l......v#.C...;..h..<h.4..H.~j-....\ .D.7B.4V.Ef..F%..|co./.m...e.1Y..A....e..........uca>-.GkvBt...nl....5;.....3.. ...0wi|.....V.ly...d.Z^.......y....H... )Qw........Pm...^.x.^... .g. `...C.Fpr..U.FjAP..f...&.....fu.Bvg..M...L.`....6H.f.....a.&OB..D!Y~:'.0.....F^...M]d.{...c.d....%~.H.zx...Uj.........#..4...VA.7\.Z9.?>zw.!dXEn&..R....r..K...i.H...u...5:bl....F...:cU.^dZ..V
<<< skipped >>>
GET /wp-includes/js/jquery/ui/dialog.min.js?ver=1.11.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Fri, 14 Oct 2016 12:10:13 GMT
Content-Type: application/javascript
Content-Length: 4207
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Z.r.F.}.WP.*.XA.T{y.B.....6..&.......C.1.0.hYK...t...BQv....\{.z.{..|............?o&.........2. u..v3;?..w..-...C3...6.u.\.:..j[..-.rb.|R. [O..l."..U...........E7.L...f..2[669.2.....u.;...H.d..L.9F..u.......h...`>o.6.ZLr.(J;..ob..k.....h...yV..?..|i[..Y.....6..I.2...6.....6.A.m.......f&.nG.P.".k.nk0..............,7.D.A\mh.f.3..-..j..U.....~....E,.6.w..l]5.m.....R.7..O.,xI}A,..\......G..."..r.^. K....O...O?H.w...E..d.]Q....]..'}....zvr. .f...Y..hm.C`..........8...B..( .mS....a..>.......h.$k.0..j.hl.FI[m..o.......A.R.Y........YU.r..h.........0.....?..\.O._..Kk.......E.m...Hl.G...&.....V......2....Z..Iv" |u..?".....?.C.zr.c.x.?..>..j.j;.E;..,.X..Y.l.../...<...>......}...k....X.|z......(...{..TeW.>=L....W...s.....8..X...Q.E....K.U..1....X....h......O`b...... r...$.(..c.....!xQ..D.kM.......l@fm.........sv1......Q..O&h...f.%...or.m..}...Q.t......c?..)........ Y.I.?....|.....g{..f..w..V...o.....NOF...>|O..Bz.EY......^}:...)x.r.?..`:....rA&.N......4)... .F...S./.eds..d.....`....^...m..z.omb..Y.....{.8...)...........f.\s..T.?e...&....T......3Q...d .O..n.....'...:DM....D....31....b3O.....,M..1"Y.r...\pw'.,..;.xm..;C...uE...=9J.V_XN.xy=..(.!.23P.j....O..A..s&..X..N..on...K8.....r#...2..fu.........92..9......j...a..."....`..3 ....>....~.e.r5..:.P..u...t*...dl<.2w......./.n..PF.%.z....L....n/. <%.R.;mq.N...s.....,......x.cru.....o..`...B..b...u..8.h..l\TQ...H..aM.$.....|..0.@q...M.r........8..8O....-..4..s?.._?.,z...Z...2...2../...Lw.8......8.NO Ma..S...p......zL....#.E...."wV.YI. .x
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/login-register/assets/register.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:58 GMT
Content-Type: application/javascript
Content-Length: 737
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........U.n.0....-........%..K..}.....V6.J.H..k....".`')...$r9.3....-../.l ..H,B..e[K.L.Q.qo..0..|d.K..~...T.[.)......T.v.H.%j.m..G..r"..8t..p..I....(E0...R..Y&.&......?.......4X......d...PB ........Q.2m..=V...,..R...4.b...-......P.V.U...<.{.Y...!.j.cG5_...D~.`..}.9aQku....N..........#.J....0b.. .e.V..Ae.=..E.Mvq..9..16....X........Z.K%.J..........psqi.s.z.3..y..~..H.......'T.I....T...V).d`2.7......2eSS..9.RK.K..)...g....u..i........V{......H-B..l.5..l.G..~......j.....Z.T....filq.a.......KH...."b$......-.d.>.........<.Q9.j$.7.{f...UE-...A..'.6.L.....,..7....0W...zH.k.....m.}C>/^..0.4.hv9.&......k..vR ...5..8:..(.v...I..Y..`.f.!..L..#...*.Et..g..P.4...$W..1.....2.. .....b.. ..8.[DwW....".C]h.......uc....}..."....y6b....Y.........
GET /wp-content/themes/goodnews/assets/vendors/modernizr/modernizr.min.js HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:21:24 GMT
Content-Type: application/javascript
Content-Length: 6890
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........[Yw.F.~._..3...!.Kw.4..d;q.Nrb..AQr.@......J...o..Va)RT:sf.,....]....k.c.."K...S...3..X.U....I.9Vm}|..:..?.......Y..Zy...v.....(...\D.O..<.."..@.....YT&_...X-Y..}.D..K4..3....T....?...7.Y...r.V.*.A\.....j3,.@. yW5........< .x..t..c,3Y.JF!.&...bZ...c!.t........X....YD#.{.;..*MB.b(....".........B.".."_.g...3.......6C...|x.D2.&Y$.d..xZ. ....d9L.P.4.....j)qZ<.....4..........:.D%.QJz....,..9.GG..i...&...$....8L..JT.rX..pF.c4.....Z.6.%...@..{.=.UYmR|......D..sIg.7D.fH9..e......Q"..`.LB..`.[.&../"..._.. R~.v..O...9[....}.n...s?w1.g../.].[.....Z...e.<O2[..1sN....s......t!......}.o.>...m.N... .qj..t...`0.F.Vd%.......et5N...[[r6d....R^.|?t.....V.;6..`....g.V...<.).........&T.L.i#.hp6.F..=....s&S7.I.......X.{.&..N...l^.....V./..,.p..s"...#.3.K.Hn.....D/.I..%....m.....p..K..9u.^.Y.|.....@-l....~|N..:.W.;.o....-.....&nj/..a....,.f....G''..2.}].....h..vS........ p.BB..M..R`3.L.D7<......?......tr.zk3..r.X(.JZ.2..ui.Xk.B......Z.;k.M.....W..V!..I!#.........# ......sn>.3..R..'........... i3.....a...K_.c.4!...Y.7"]K?..M...P.....'..R.8.I.$H...o.D...........N]R/...kg....I...&.'........2..f.j...3?p.9.&.....Fgn,.....F.hWGG........q...N8Md.1.O>..4..$.U....n!...l7.x...%....J.N........Z.Eb.L..02......T..v>...b.z*:...qx..'6..d...8K.oa}..Yj=.|).d)......Y.R...#=h.de.e..S7b......m.6`.^....-.c.r....I..f....T0......>...4|...).e.O}.9./..t.'.3x.3....ch.........Z..y.3}.@G_...e........x....m.........X..noo..gn^..OG..)....D........y.o..........C.q....'|..8.>qX....K4.y..y....:...Sa^V.(.{.........!.h8t.
<<< skipped >>>
GET /wp-content/themes/goodnews/assets/vendors/jquery-autotype/jquery.autotype.min.js HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:21:16 GMT
Content-Type: application/javascript
Content-Length: 1694
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........W.{....*x.rR=.J....\...i.4iz....GH.(.%EZ.P......v........}....].j...I.....1.z&......C......E.MS.....0..~..p2....@....c.we..yTk....J?f.e.yn.\X..wG.1....e..>m.............t~..@.ykB..[..%)...;Z.W.m.].....M$.^..v"6U.........<.v...4.....<.. ..).zm]Z..#....Ne{... ........Ds.)..Q..\R. ...-5...<|...?@".Y..l.&9..lq}m.K.j../..O...~_...6q.....8..S..m.@2..tV...^ .....H/.....4..Wa......J.J....m...S7..Ti..<.d.S....d.e... ...En.".Bo...4..vW&r......eb....6.....Z!m............%....:m....T.(..v.....3...N66Y.u1......'..p-.fR.7.E.m...M{.Rl8[.>....c!n.:4....c...#."R:G"......,.uyc.R8..<lV..}86~}..\.........Q...m.v#q..i7n.GB...&...........8i.6..........=g..v..K.u......rh~...t].a.3.9...........O.h...........3.#..@.~.p.<.......B....gF.MW..._WE.."y^.5....."n>.$WK......Mj.5f.......(....W8.Qfu...z. {..tt?k..Q|.....]:n<.o.qC....9.y*U{v.......UY_.eE9E................l[..#...s.B"8=.]5kl(.......I.Ys.....8.Qu.^.T..HE.)...%.I~....I>..Wf.uZ..j.....v.....,.6....z......f]...].5...^..h.J'.....7..p .9...Y..j...K.o.3.N..Q..!....q.O.V....ET%w..xQHd]....VD.....Dg..r...(C.>.4.....Y....mC........B.K..o.....uQ.N.x'...J..G......Rfox.......^.}e..#...oBe....).QY..%].<..\5%...I..........*...i|..........NIn4..T.a4u\.hDy...t,..i r....!O."G...(>.O.1.|16....(.(-...O.8......)J....&.*.....:N...=..$}L...y.-=..-..CZ.!F.....%.#WKxG.....-...Y./...\H....8...-...Ix....Yv...z...)....L............y<...}...{4b.@>.C..?..}.&..i.~@.V.G]A...J...Ax.s..~.}H...#R}...%.........c....D...H.:.S..J.G.V..YP..CA...H,....,..x-..oD
<<< skipped >>>
GET /wp-admin/admin-ajax.php?action=refresh_likes&post_id=693 HTTP/1.1
x-requested-with: XMLHttpRequest
Accept-Language: en-us
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
X-Powered-By: PHP/5.4.40
Content-Type: text/html; charset=UTF-8
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 170
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:17 GMT
Accept-Ranges: bytes
Server: LiteSpeed
nnCoection: close
............K..0......C.......Gr...h...........T.8tz?p....s).QYsiYV...TG'E....g\.M0>.. D(?r4T..n..........}.jV.J>..2..!..........4......6.._.W.'..7.......!..4O.......3...HTTP/1.1 200 OK..X-Powered-By: PHP/5.4.40..Content-Type: text/html; charset=UTF-8..X-Robots-Tag: noindex..X-Content-Type-Options: nosniff..Expires: Wed, 11 Jan 1984 05:00:00 GMT..X-Frame-Options: SAMEORIGIN..Content-Length: 170..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 13 Jan 2017 19:36:17 GMT..Accept-Ranges: bytes..Server: LiteSpeed..nnCoection: close..............K..0......C.......Gr...h...........T.8tz?p....s).QYsiYV...TG'E....g\.M0>.. D(?r4T..n..........}.jV.J>..2..!..........4......6.._.W.'..7.......!..4O.......3.....
GET /crls/secureca.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Thu, 13 Oct 2016 09:30:22 GMT
If-None-Match: "b6a46da3cf1aa70c10b101b12c9733f4:1476351022"
User-Agent: Microsoft-CryptoAPI/6.1
Host: crl.geotrust.com
HTTP/1.1 200 OK
Server: Apache
ETag: "52869abfae9354140d8141083d09206c:1484335820"
Last-Modified: Fri, 13 Jan 2017 19:30:20 GMT
Date: Fri, 13 Jan 2017 19:36:19 GMT
Content-Length: 325
Connection: keep-alive
Content-Type: application/pkix-crl
0..A0..0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equifax Secure Certificate Authority..170113192300Z..170123192300Z0,0....%...020514181157Z0.....3..020515130611Z0...*.H..............P.Z3/.\.)...3M..`.........q..nx.... z..ejf...K@..P.^YX ....[Fv......~...TU..n.*.D.f.\Vf...H.@.|.i....Hi...7.m.>BV...4&]yam.%._HTTP/1.1 200 OK..Server: Apache..ETag: "52869abfae9354140d8141083d09206c:1484335820"..Last-Modified: Fri, 13 Jan 2017 19:30:20 GMT..Date: Fri, 13 Jan 2017 19:36:19 GMT..Content-Length: 325..Connection: keep-alive..Content-Type: application/pkix-crl..0..A0..0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equifax Secure Certificate Authority..170113192300Z..170123192300Z0,0....%...020514181157Z0.....3..020515130611Z0...*.H..............P.Z3/.\.)...3M..`.........q..nx.... z..ejf...K@..P.^YX ....[Fv......~...TU..n.*.D.f.\Vf...H.@.|.i....Hi...7.m.>BV...4&]yam.%._..
GET /wp-content/themes/goodnews/lib/modules/likes/css/xt_likes.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:51 GMT
Content-Type: text/css
Content-Length: 457
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........S.n.0.<._.@.iP9Vk.6sI...^.J..E$..6.."..%)[...J.C........~....%4{.../:.^-........h2.N.j......D.9......u.....6~E..z.}....V.....R<U..u..G'......PjC.....j...M.FgEm...G..4. ....a>b...<a.'#]>.....5....E..u.SX...TG=I.E@.8.....D.;...h*...........C..r6...A......n....|. &....P# ..`..O.....0.0.....:.'~.N....=.W...=..$'-gJ.OA..0w.:.q....s..dB.....ti.$..1c....$..aQ.W.....}..2.Tx&a..U.u.D...\l.q...V(...]...*..?.....{..dX..3..hK..f..e.....c4...9....[8.\i.......
GET /wp-content/themes/goodnews/lib/modules/social-share/skins/default.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:25:13 GMT
Content-Type: text/css
Content-Length: 1730
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........X[o.6.~.~..b@ZD..4m.....v{I_.7Z.l..hPtm'....M"%Jv.6ER.....s...h.d...%..=Yn.H......$g. ..P.......L7Q.v[.c..X.y...}#...>CkZ..y.Oq.]..-n.....WIC...M...=.%u...9,......N9....V....K......V.G.....E?..\J&O....~.L @PQ....G..H..M[2^gh......<...U.g.......j.W.I.L..;n....yV..KZ.L`......Z.Y?,.ziE......4..X*H.Z.H.i..Z...A.......,._h.e\.F.... 9.XP.d.k@.h.Z..#N*..&..~..V..;.^.y.o.1.(h.J.....p-6.y..m..!.Ci._.hO......qEWMf.~..}....D ....C.c?-.I,....@}.WS.7.8'K.6IE7......T\._...4.....`[..x..c.E.4X. .........@...;c.<&U7*.....p|..Bs.Ag.h..c.`........?.........<..F..R.\.>.....'.[.l...~.b.^.3..qj .J....p..%.RzN.....l'}*[.8~Q,..8...-...v4 .....p%g.......EAVo.......|d;...w.N!Y.h.f.>.Qb..!....v..8........x....`....=............N%*>I.Y]...~'........o*......%..3.7.2.. .vt......"v...3.\M.4..y..9....S..S!xhN!..9..C....`..M.......b.Oz..:.M.A.:.j.~.X.;.........:..n6-...`...P#`..o.nP...m..S......?'.).!C..."...G.a.?Ww. _.F...U...|ti?....!......x.b....Q..2.Sp..@a.!Ga.5.......N0.S_ej.%......J3I..Ng..;.04.:.....^:.S..j.vY.'.....%...O....*.tf.......N).s1.. .$...!......A.....rb....Y.. .T..A~....0Vj...@.. .7O D!..$....l.M......^.3I.'...@<..R{...[}Z"W.Xr..`?..[......h..7V.......s.....&...V-...^k...... .8........f..l...j..n....."...sX....T.1..qA]Zc.Idhw.......t(..5....A........u..s..qX.:.......Mwl:u.,.W.}....r.uw.|*....sn.p.Wh.*.ty...!....Q.;F1.N:.k.R:...../L..O<F$G......{.,..h...z6............t.g....e..$.;·h......Y..4...~4`..F-..(.....)T.rF..P.....d.v.J../...'.6f.J.....s...}./..M.O..l5..l%..fHVI...E.....M.O~..5{.
<<< skipped >>>
GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:41:24 GMT
Content-Type: text/css
Content-Length: 9086
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........].o[Ir.L.....[...C.e....%..kK.K..I61..G....GY...r.@>...,r.A..C.?.o....|.I9.A.Dc{..........f....c...Q.y.z>.Z...:...d....:JF..d..Wo'.:OV.tv...^?.,...RC6N.U..:Yf..).j.n4..x..Gz......ou...j<_.j..8.&...`\O.q:.7k.l4...5..i.:.g..U..V.........[..'....z...|..F. Q..J.O.t....,...`>....)[.z.j9.{...O.e.M.....W?.......wv>..v...7wv..r....I..d8L..|..Vo....]`.?.....F...$=.A/.UY'..UrCt.......u..h...$\'..x.S3...X..3.G..}..~z0...g?....n.L......n...-Uh,... .U5.F..[.H.W..,!.a.-&1D(.M.Y..'.. jX%oV.0...1i".0N.......j.S.dJ....2.EK.B.-O.>.....@........{..|..x.IQ.....Z.K...g..Z.....3._.[u9y....|.dP.M..x.....<.j..2.IC...YU....J..<c.$fju............C03.=M.ts8K!.d..(`5..g.,...T6._M......t....@:...d:...t.YX.Y.@i.Q.r..@.pR.};..~$j.q.Q..*.....1f.F0........$v@.G<.)..w..A.}1COSb=..s...(..,$s4....5`.o...e?..j?.E...f...}C..F..$^..QK..z..!.4qw~..7.w..{..;..._.C.[P.u.N*A;-...s..`u.L*a.....CX.. .T..{.........r0I.U.#..wCp._6...i.....%......Co...AYg...{....B$fl. ...=...a.er....G.......:`...0..g..$b......v...Ge.b...[C...Bh...^V..K....B.......C.i|..*.l....!.B4...g./.....LS../......U...V._B.....b.....Z.._U....8.o!.k......]..WC.x.._G...*..?...B[...im_..6.vJS.......n.i:K ho....a....z.........z..g..Cx..5.....a..@.......{...V..}..........o..#.b...5....../..VUI..m.&.M.9I.U.. .........y.u......I.t.b.*.}...U}...}..>...i...a...N*q.].?...._!..&.r...".G....k.(.T.u.W._........i.x.5..k.S......^.j....<V.._?=>....Z..d)^|.q...5..E.|W.-.X...e.L....j..M......j................i.".f..j...h.b.;C.a.......x1K..I.U.. .......?2=....
<<< skipped >>>
GET /wp-content/uploads/goodnews/style.min-3.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Fri, 28 Oct 2016 22:01:46 GMT
Content-Type: text/css
Content-Length: 21648
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
.............s#.. .W...B.5......!....<^k. .dY..F.h.....pf(.#....._.efeVe....cK.1-..].....|UVQ...xVu7[.u\.c.....'.....}r9....v._.....z8Zn...\.~UN&....]..<...Pl...wRzx].7..xZ.&^.....z...W...jU.;.~.X/.....M..r.P.~...U9..A.......8Z.....C.l..z.y^...l......Iw[og.q...P..v6#l...Q.P.G.5.)..r{..&.Q9~s.^..&{..l..5...?W...m..ToW.M......Zla.^.u...j..........IX......uwU.K...)..5.G\n..x:......&...s^M...\..:......r1......fy\..Z.?.oC..Q>.....wy....mw..z.Z...b.k..z1..5.....S.E.-G@..i..,KL..u.../..V..(`.........z^.T].$...YW.r[...qY].....z2......{].`E......z2.........bs.\.....z.Y^o..g.i...W....}.;zv.uK........]~....o...L.P..U.7..........^q..T.....].nM...n.5.lU.M..m.q........c..6..D.'.*..T./e*..%.8....*.nH.u.k....a~'.....t..4.....L......j}.....a...u.......2Z...E#.].R...G >.n . H.A.CIP,..Q...:.r...u..{.g.......e(4..g.t.?a..`.wS...Y..d{......bk....|p...Y....'.5...#!..hP..@WC..X......H..j.....q../.6......Cx..x......?.......h...d.P.I......i.h.....(..4I.."JBW..<.a.e.....P.|.L$ s6....E..vP.......$........6..v`.8.........-D...,w...i.rg-..................[....Z......:....J..].....P.MLA....&..u..T...........z..)......uS.....X.T*.*/*...2w.Ql..(. .B.&..Z../....Z.w..v;].mG.......y5....-(.."....Q.?..Ev..9L.'.X....%6..&.f5 ......f...E.`....3..(\j'HA... .4.U...U..a.S. .......F.l..Z.!......_......I.B]s.F.$..(.......Y...4. s'd2.g...T4N..........7.....^.....?..c7.x.........m..z.=2..........ur_XF....>'..b>..L`f.Y%...#n .F\h23T....`....z".vW.o*|Z.2.v...........s..$..)l80.).../.uf..-..%M.u......J<L.........K.....]n.N...gA.h.....
<<< skipped >>>
GET /wp-content/plugins/xt-mailchimp/nm_mc_style.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Sat, 22 Oct 2016 09:44:05 GMT
Content-Type: text/css
Content-Length: 261
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
..........eP=o.0......-*.m....:.;2p.S.6................'k*.T.y#N fd.1g..Q;..V.i.b......X||...9.5.......7...o..P..=.eC...N...dtV.U.G#C...;.T.1.A.h..@s.*..5.n.....9.0p.x"...?IK....m'#~0...o!.....k.y.....!u...R...5.e,.f..M..._...:...F.e..8..~.sc.D.[........A.c........
GET /wp-content/themes/goodnews/lib/widgets/assets/xt_twitter/widget.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Sat, 22 Oct 2016 09:25:17 GMT
Content-Type: application/javascript
Content-Length: 445
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........R.r. ........*%7.p...|.....-..F.vT...Z...%................F.(T..>x;..>..b>.tg...3r..qw......#BbB....y&"..g.Z..........r..gS.......h.....Ar..D(..'..H...V..5..........1.5..8.p_5.....^...aa.V....=..xS.G=.....5........k.'...?P..&.......:....T.h.....X.#.@..0..rY.E&md._....{.W|..@x.... ...;......../...3...5.c.^..s..,.....lr7..U1.O..e..[.WB&.G..Q,K..m..=...e..Fd#.mI.O.4@....D.f(......oy%(...<u.\.r......R.. n[.....P.|.A..;....N...~.0.C.......
GET /wp-content/uploads/2016/02/teknogezgini-logo.png HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Fri, 14 Oct 2016 11:46:19 GMT
Content-Type: image/png
Content-Length: 32498
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
.PNG........IHDR.......B.......i....7iCCPsRGB IEC61966-2.1..x...wTS.....7.P.....khR.H..H..*1..J..."6DTpDQ...2(...C.."...Q....D.qp...Id....y......~k....g.}........LX....X.......g`......l..p..B..F...|..l....... ..*.?.......Y"1.P......\...8=W.%.O...4M.0J."Y.2V.s.,[|..e.9.2.<..s..e...'..9....`......2.&c.tI.@.o...|N6.(....sSdl-c.(2.-.y..H._../X........Z..$...&\S........M....0.7.#.1...Y..r.f..Y.ym..";.8980m-m.(..]....v.^....D....W~.....e....mi..]..P....`/....u.}q..|^R..,g ...\K..k)/......C_|.R....ax..8.t1C^7nfz.D....p.........u....$../.ED..L L..[.....B.@.................X..!.@~..(*. .{d ..}..G............}W.L...$..cGD2..Q....Z.4 .E@..@...............A(..q`1.....D .........`'..u..4.6p.t.c.48....`...R0...)...@......R.t C....X.....C.P...ËH..@..R......f.[.(t....C..Qh...z.#0...Z..l..`O8.......28......p.|...O....X.?......:..0...FB.x$..!.....i@.......H...[..EE1PL..........V.6..Q.P..>.U.(j...MFk......t,:....FW.........8.....c.1...L.&.........9....a..X.:......r.bl1..{.{.{.;.}.#.tp.8_\<N. .U.Zp'pWp...............e.F|.~.?..!(.....HB*a-...F8K.KxA$...N.p....XI<D<O.%.%QHf$6).$!m!.'.".". ..Fd.r<YL.Bn&.!.'.Q.*X*.(..V .(t*\Qx..W4T.T\...X.xDqH...^.H...QZ.T.tT....2U.F9T9Cy.r....G.,...C.Q.(.(g(cT..OeS..u.F.Y.8.C3...Ri..oh..)....J.J.J..q.)........2.a.u.;U-UOU..&.6. .....y...J...F...3.}.....w...@i.i.k.j..8..t.m......9.....5.4#4Wh..............:..T.......C.....U.MG..C...c.......d.1.t5u.u%.....3z.zQz.z.z....,.$.....S.:.!.........,...].......b.6.u.=2V3.0.7n5.kB6q7Yf.`r..c.2M3.mz..6.7K1.1.2.........-..N.B....L.....le.Z.-.-
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/widgets/assets/xt_twitter/jquery.tweet.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sat, 22 Oct 2016 09:25:17 GMT
Content-Type: application/javascript
Content-Length: 2961
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Ykr.....4.%...H..n .t^U._[q6....3&.$l.....Z.U>FR.. G....'..3..... .?.<zz.{...U..e...p..LX.....VV$Vq*z=...m4.C{...X....]...~...9.m..F..RO...a.,...[.-\.............yn...Ye.Mcn...p......M..^.v._.;.{..X....f.6..V1.....e..a.N..R...,....@......-..9.@f....p.K.y...O...e.9poW..[.....S9...S..)...D.....].K..s..1-.....b............_..wS~..|...'E!.D.........@.<.n..o.[.%"]...`.k...<.......!.......x..h.%H-<^....../.@.7or..U.......b... .sg.gc.qg.n}>fU.....f..\.o..B........U....Z.h.M..{..YtxY9.~....{~y.....m.....!..!...V....1.M...h.....n.*J~.J...Z.........#q.......Q.......-.i.....C...........:c.............R..u..........=..<..Q...A.Gk..\v....d%,.n...ew.......f:k......inE.A..y8...zN*.h|..d.g...K...g........yx....|.8.....I..Rf..Y...x/.d...9.;...l......"r...4...C"...._.{}.......#.e"[V......y.,.q.1. .V....eV.........t...X@Yc..".Ud.....@..a..tJ.c)E......%..?.F>..~!.,.Qxo.,e.T.o.......id.*7w....#..Gn...%M.l...b....R.....4..5.....H.....[...F1..C......gy....,5'.s..K_.@Me.i"O..^o...r^{./..<.O.[H......|.......W.<>.U.m.6.0Dff3.....sj/.T.........E_?.g..1.F[ ..j.. ('....)..P:...l.'b.o.qD.."^....Q'...H8.g>E.x..a.^U3...z....|.U..@.,........... ..pcT...gH..S...).Z..HKT,R.......E..dgR...}z.#...PC.Yp...o.....z6.:^tnt..Xv....Yj:....Y..mO...-.Ce........]x...R..=..q.r.j.:L1..\r...'.u...=.M. 5....j.eK.!xI...D.;.l.%...>,<-.z.y.6r.Pv..<,.H.Dd...K.....Q|..Q.6..O....l ..q.!.tS..............t.|.P...8........F..3@.9C^ix.#..xLV.. l..Ej.0A...2..a......x'...x..D.....|.I..;...|.'..4...RG....".......mdF^.
<<< skipped >>>
GET /wp-content/uploads/2016/10/ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-367x245.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Fri, 28 Oct 2016 20:10:32 GMT
Content-Type: image/jpeg
Content-Length: 28271
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$........o.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........YS*..c.{W5...&....M....N>...zkAv..`!.[.....W...._\..G.........{P...g.8(..B.sw..122;.).q...a.[..8,...&..n.&@m.^9.n`.....A w.......3.1..TL.$..J........t..jeS..r..1P...ITn.1..9......Qd.J.....k.w.(..z..#........Z".r1.OO..My..B.}.....N.....|.E'fd....f#.<.r..B.]..g..i....y"K..X..#.t..{W....5.$.......L.............,..K.....a u...9..tN..1.:$.......W$......k..f..[.c.".a'...VG.w9.3^..i...}..,. .....X.;.Sge.H....D..9....C.~U....\.........8.....Q...7.......y....f...s...O..._.....["W.A.. .0.>. ...n.[Y...O)....F?.>..ZN....R....4.b. U...-......'..5H-..dm...@ .....q...w..2]E...G...c........-....J.N.D..9.7...EJ../..3.i..om..jg@...#...1.c.5..f.Ok....g.Xcy ..l.{...^.R..y18.r..:.Uk[.|~......n..3....s..M...........0..Oj.......vU....z.....6,3.....<g...X.K. .......N*.......;k.i..w..s./<..?.s....!n.^.v..9..?*}....A...:.B......|N.......o.iN
<<< skipped >>>
GET /wp-content/uploads/2016/10/Farming-Simulator-17-.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:59 GMT
Last-Modified: Sun, 30 Oct 2016 21:00:02 GMT
Content-Type: image/jpeg
Content-Length: 69106
Date: Fri, 13 Jan 2017 19:35:59 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.....H.H.....C....................................................................C.......................................................................}...."................................................................................r..|.w('w.w(s.S^.G*r.....&4gM...,Zf...S!T.... ..*.ww.9...r|.....TT/r./*;.....r8}..o9P...9_.5..d.t.._.L@.....gj..Er.>h."Pe..Q.......:....s.b....r..{....... ...".....H.....y....VW'......(..7..c..o/./("....>..^EB..D^.......EW$.w&.j.W.NV..>(u-a.....J.W..Gr."?.b...w&..>.......U.....~.%.;..&...Ui...y.|oMy.T...Z.>jNTF.... ........y.6..J.T5.....D.d......$.d5..R.t*..1..T.N.s^.H.%...\...l.....:)...X..F5...5:...F.%"DM.p..r.....;.M>GA...#...A..zZm2..m6;........dw....".WtS9:.y..?N....Hd5....R.F.e2'*o*.$.UR":)\..2B.g.8.x.....*...C>.B...Y..%...H........V..e....Y|...G7L..A1W..#..#....Z|.,.pz".............]8h.....O.y.....9^...K....U.i....h......y....l..\g|.9.....=r.......^.w*9...{....r*j.p".&...GF.O...V..7"H.g.......s....rs.*..6.2..,.>D. S1Y.'7..R,._...:......tt;.....s.d0...L.]9.r.#=\.#/......[...0.k....c.~.\.'FH..d...z".9......w]##J...}S..k..*.|..s..]i...........9..1ZG'i......t."/NK.........m.9.....M..t...4...Nr........|j..........Z>.px.....HT.....h]LD.,...U~.6.!.i.WB17/...T.J.%.`.I0.....'g.C..w....3.Nr.E..M...m..?7.[....u.g..^......>#...m..~_g..gz.$<G.>W..~..b?.../.....}~.Zew...D.....4......?.|...~......X.1S.....,4...>N..X. :=.ir}8ys.3..vU......6<z..........d....,v.n.].<&R...a......Hc....Uioz...]..7..#. ...@F..]J...y...W..e.;y..!..{.]".
<<< skipped >>>
GET /wp-content/uploads/2016/10/fidye-yazilimlari-ya-da-cryptolocker-nedir-860x484-165x110.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:04 GMT
Last-Modified: Sat, 22 Oct 2016 10:18:57 GMT
Content-Type: image/jpeg
Content-Length: 10015
Date: Fri, 13 Jan 2017 19:36:04 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................n...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......G......*`....O..^.........C...~...$.....vJa..V.F~..9<z.W._...?.#k....b.....<.=v....v 9l.^...m.c.....O.<...X..tkI..g.Y~'.....5.....4w......>....|w}..v..BC.p..w0..J..#.9...X03.8..>....d|&O.."....w..i|)......r.r1.p8>.........5.....6.i-..e3[.[L.^9..........).M;}.5.......[.L...[....-.~........U^2:... O0.0G..n..K.[.?.c.........@.`..|..........#.....2.?..."....o.z....D.ZU..9n...v...p70....z.....{-K..,k[."..o...u..q...P.)!...0....*u..4..g.[....\.g..V>a.......V........e..;85M6.H...vt...........V....X..8c2L.*...{.....QIlE.....1....q....g...8P........y.....A..e..kj..d...C....j.....z..Ek%...<0.".9...o...c......%....~.....W.].*......q....|/...J[.J.[ .X....a.....z..].{.^y.....sO.[.T..z..E..<1e..D.....'....c.^d.fE12.......$)..H....|..........H...d.....(.A.85...e%..4l.89.........~<xr.......&.mB....f.H...7 ".....P]......3
<<< skipped >>>
GET /wp-content/uploads/2016/02/Bedava-İnternet-Paketleri-165x110.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Sat, 22 Oct 2016 10:14:15 GMT
Content-Type: image/jpeg
Content-Length: 7494
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................n...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...e...;.Z9.....m;.Z9.....Q..N..}h..~.m.S.}h.....F..;.9......8.o...sFO..7m.i......3e.)....@..F.~O....6R..d.....3e...Z(.6.6.....'..../..V.Y....:.Y..6.._8;.......~k.......i..3J...F.....N-.......f.....].Aq....x./....c?g...R.{?..sj.<E%y...=...i..g..._Pq.......>.....m?..5..5'..-..il...%.;.~`......>9.M...4V...WI...........Y|......?( ..z.p5k.u..........;..q...Td......_.c.qF .............>-=..f}-R.,.cT!.z....y........>!....E..0Yy...>m..j..bgQ.Q.4.[.o..c....9h.{=............?|E.sq...B.k.......{.=N9.&l..B.......].?.L...C...{[='H....... f=...P...Q<...{&...MY4...U.........Vi....y=O@...,.]....K...gJ.I.s..~......b1.p....'.......3.6...........{.;.......b.P....~V....5q..2...j.....j.....c..T..wz&.[...g..4m5.....?j.<..?....:.....Kkk....TDB.HP.xA..V.........,~1..c...-....jqN.`.U.....qY...i{Y...9$.m=/}.-c.......U...5...='i..k......./.{O.
<<< skipped >>>
GET /wp-includes/js/jquery/ui/position.min.js?ver=1.11.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Fri, 14 Oct 2016 12:10:15 GMT
Content-Type: application/javascript
Content-Length: 2733
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Y.o.F.....L\]n...\.......E.$.^.C. ..>..m.LQ..I..}........h.;3;..s7.7g_...n....n......M..e1.z...--.......{...^T....we.......~,.E.(....e... *..N.mS....Ef2..x.Z,.f.... K#Yl..bK..Wc.j66*.U....WF.1.._.%.""e.........*Y&.X&i!.......\.....:K.0?p5>..Z!$........... t.....,......2h.`1Y.7n.5rc...x:..S.O..'t..G.nylw...>.....\/.l...N..0.8b7d...v.!t..c.C..yE..k.3.?.q..CO....%...z..2I6...MY......'...x......G7b.VN.m........J.....\.."....,..e.l...1.:NNT.y........ .=`.md.....J5..:sw...g&5.o....p..g...._..A.......0.7<.......1...o....?c~'...N.e....gb......7.....7.r.._..<....<.......2.%tI....,h.b.!..}J.....i.>.i<...!....N.....\."N...f.I.M.n.,..aVFw3...3..`.i....z...Q..A.IV>..4.e1.../.P"...%.H.D5..._..D.^.N.....z..-.2.9...J...3...XK......XU..hX 7zF.R(........e)L..0..e.!p.).Qt. ...|.}....]...p8..._F......hB...S.FO.*.D.#..s..(f.F.9....i..e.....N...8%}........k.:VL61...;74.X/t.r....2.Qa.[....3..nx8<..C..S..G...E....4Gg...jl..G.....Zk..&..M..|...J.G.q.D.$.}.W...Z..3.vw.,..M. y-'."...3T.w.HG~..D..R...<..$..q^R.d;..nxP..Wn.L.?..P...\2...^.{^..o..iA... .Y.C tF.........~m..}`.I.4B.O7....$K D2.M.........&95"v..o...e.. .....d......F..c...5.:....Qk..e..Q...2D...ha.US.v.. ....D..T..L..f.R.....}(.8i...X8:.;K...)..K.1.....'..T:f|K...R..U...n=...,#W..|.~......".S..`......%7g...'.k....|/....O^...)..5..U.(-..05...i..j....e.<~.n]"[.)...Cq..{....^%.B.....O#6............?<...q..@E....|..........0sr.ZZP..{6....0.Id.rx...5_..>.w.N......j.........0.N.<..g..O./......8W....N.U...]~a.P.8W..H./..q.*1kIC..
<<< skipped >>>
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Fri, 14 Oct 2016 12:10:15 GMT
Content-Type: application/javascript
Content-Length: 1121
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........VMo.6.....t..]...^*W.!n..\t.....((....DU..5l....C..N..$293|.f.......m..}/.}....d..`..s.=.l.j.....h..,..,...l.m..*.......R....@..h.\..-.^..C...N.N....6........E..vv$..ffw....oJ...U.}.F.7...sD.sr...(M...r..b].....g.*..g.gdbF4b.......E9IxlH".....O...4./Z...2.......a.P......'B93...(.f.=<....Id...l0..9..........U......XU...P. k......'sZ...'.'..>...U2.w.......A.......H....f.;.m .. A. ..M<c..%x.1'b..P..^...C....4M9...q. ? .f.&<.]..V<..{..3~E.8.Y *.$.W...uJ6.U%.. .[ ...M...k.s.J[%...%s):........64..N.64t..4..gB?...@.......c...L...u...a C~P.19[........ >..l*&..&.'Ic.......T....t.M...m.o.:...8..M.:............a.,.6.......|';(W|.....7jk...P.p=..........hb...e|..*.'q...%.3.ke....J.i'.~.^...0sa<.d|~...j.....$..G..$..[0]. a...a..5.M...h..q)...)T.-I..X....e)C.....9.-.K*.0...&....}G!....=..j....Z.\.P*......r.. '.c.r.1......T.......E%....9.....xt........F.3f.#7......,p..8Ge.ds2.<.f....0y.5d.s.....|.e.7p6\#_.....\z..^....>/..........M..[.x.oI.......0.....0.....\......9.....s..9.!.&8...k.'...G......1YP...?......c..xw..m02:>pV\mY.....g...#Rx>.?..L.'......'B~2............M.=.n..n...m`.]ZGz...k..2....N..[......L.......
GET /wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Fri, 14 Oct 2016 12:10:16 GMT
Content-Type: application/javascript
Content-Length: 2833
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........YI........X).a...TN.....W\...d..4J.H.K[Mj.t."...{XHJ.q9.\$..{x...W...W...z....~.>.2W.w.........v..../t./..~.2...w.........J... OT...B5^ZW]S&}W7-A.]m.h..p..8....O..LU......n...k/.$.].N..1\........n..UJ....|...q...:....J...?..re...op...X$.......0>..K.[..o.F..]Sw5..["y...o .0...{..x.O..n.K..(...2.. .o.U....@..:..e.X....d,.{H[....IU].3..J.....La...~...O..V5.o6}vJE..A...$H...L.d\X1N..)..@..s^.2>..C...n[v...l}.q\'..w......._$\....S.N....J...Y...Y....\?...l%`...Nl...5..W....a......2..N6<wO#..G.wE...i.D..!.....h.....nU.w.|~}2 D,.....gP..:U. ...O.ia{..........@.d.>-..|WWm..)yJ..../b...".wd.-.e..]..aSKP@.....I;y.....s....ÔJ..wb..p:.6 B..m............a.. ....e..:.,....w..>'oo.r.8Y.....S..I,_&wz..x....^..k.....Z.GQ\........#.l.^~..Ua.6Y=..(9....!....W.Q.;.....T..J......zA..l..U...6|iCS p.%.(c..)..p..N...\......l.y...)...X..WT....03D.0i(@...bN.sf....I).R......b..].....o.g.K...b.#B..........,....N.a!.O...M.....d.9.....1.&dZ.?nEY}J.T.!....C.....V...pI.@P....F[X...s..#....LD0D\...\.Vg..$.2..<93~..>l...1.e..K.,..9.....c\.h..H.....t.,Y ..!.*U.,.m....;.I.h.z(......ygaZ..m...U...{.[%/.Oq.9mPOJX..<...Uj..G'./A..t!.M..........W...i.=............l.CNZ... ...1.MEU..G.h.[.u...5%pt5 .....?..Zz.....C.......i.EA1..$...L"..."..l.,....1f".K.J........ ...x......} ..i.S..A..a ...D..Y.W.....V_...z3n.6..8.c.o....7....#.d..v?l.%...#..?..... .V$[%...7.<"q..V'i=.2..c`....m....E*d....t....K.'....HOl...S..X.O.a...@$e%......X.^k..q)..^...$......]..2..P`ten.G.;..4....T..,..E.!...>.O..A.....BK..5$}.B.v..Z..
<<< skipped >>>
GET /wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Wed, 21 Dec 2016 18:53:04 GMT
Content-Type: application/javascript
Content-Length: 6419
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........[]w.F.}._.b..@..(g2........w...);..jr@.IB...hR....{....)....D.wWW..U]<........?...8..j.|..........,B.....`p.zp..`.....j.....J....<..) '......r....L9^.;.......^...r...9..E..e...B...:....R...l.S. ).g...".&X.....*.e..J..:Se...jt.fj..s7=.w.^..q..Y".Z...He...t.>..J........@.yy.?&v............,....I..]...U.%......".Y.r..r.......x...G....w...C...fj..=.[..H...."-.....U.;.N.l...Q...Vq.T...X.C.d.;9....\..NF....z*X......D....T~......x.)...]3C..A7.q$.h.M.^..<..d....N.o.<..;... .8H....:h..@.(.. ..T..J.eU.......h{Y.fYM3f..!........&.Q.*....p2A9..R}.../..D..MS....q..~.le0).Xz.%.....lZ....V...X.Duf....X......Ge..x....).Cl.&..r.Z....,.2...e....`.9..C....iO:H.x9.;S.{..5.{z..'.U.o.5.*I..}..A......K_...g.6)...q....y9.=/.ZYu/....n.-.0...*.......QDO.a.L.\..,j......X,.......:{...............i.......;.5..c.A.....R.....-.^f.....A.&A.X.....Fp>.*Y.I...Z...@..?..v........H..1.N..}.n ...S.^3....Y$.E\.s....*N3..8..z..(....2....ut{7.8.8...7.0>9......?..>........T..:..........z...2)S..O....EY..<B._..8......V..W....VDGXD.|dSI........Y.0.Z.:.Y.^|...E<..?..|)..T ....`....)........x..#............i.....j..>........./.T.g_.%.p.P.np7.....%..ii.5.......K...O.7....X..2N?W..4....:X..V%..*,.;'....)Wf.~.~..4.$..1..0Yy...S.....2m..dG..q*....F\......L...fZ...K...].*...,Hd. : .!.......pt......./...V..."N.:.Kh.......e.D$Fz....!..<j?..H..D.#.u.b...;`\.%..p.d.D.^..6O.....oL..i......x..$V....=7...T. .&.W..WC.B.;.............j7j..%.l..}.7.yZA.....>.....G.Xia$"...........S....>8.F..4.>hVV@..<.'.V....|...
<<< skipped >>>
GET /wp-content/plugins/js_composer_5.0.1/assets/lib/waypoints/waypoints.min.js?ver=5.0.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Wed, 21 Dec 2016 16:50:34 GMT
Content-Type: application/javascript
Content-Length: 2896
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Y]....}....vAf)....A\.h.:-..ic ...P.H.......*...=w.....h`.X...;..{...*...&...dqH..W .~YJ.S.M......o^|....C.ks..\.!.$w..kt~.....7*..y....f...M.k:.H..~..^..~.tI..L..h/Z&..a.O.|...F...?.......v...j..f.(....o....-....p..?d....v.........Wv..T...7W/..^,..E.?.5....K.S.....|...W..h....Qc....X.M.nE../.G..X...........u].\2.."aG....X0.i {.`.*.^F.v._%-[q..B.,I/.Lc.l....k....9-f..C:/..L..,......u.s..L..V...gt.hv!..x..]..b_4....m. ..]q_..m.k...Z..\6].."...........u}]......w.4...X.1.8...c..o..~<V.:.j..`..&.M.].J6..Y..]..tX.....;.u./.&`.!... ....]}.]........`"..T....X..L.Z.o.9............N.......y[.............}|.....G.RY^.|..~..G3.....Ve..&.......ff...0.T..".C.......2c%.fL{zZ..c.P ..Qc?..7...r..K.G.].,....-...{!f[..)EH.>x...R...u.....-3.`..W..L.)C...e.tli|._f).A....U...=!.{$..f#....1Z..7....o..>`. .Y>....F..T.tZ,..G..!......J.[..>..!.vj.{.o....9.hyq..T.....{z........9..5....a...\Uu.Z.Y.~..2l.......*K.....q.LE|....I.....y....H.....B...{....~.d.]..D/.M..x...%.s.,.......$.X.)k.......>..J.....:.h{..v.IM....9 ...p....'.$...8....R!..Lf3>'.bSg...?O.I-d.pS..|tx. xb.Y...P!.n@$kQ..WpY..s[iY:...<.[W..4.".Rc Z.~..y*.\O...R...(....?/@h.|.r...z..{.....Oy....O..0....w.........3......`.|c y.......F./.O.....;...ct .J.2.... ^..<.....lA......87n...I_4.$.$....,.......bN...o... 4^......(.......9...p...f....m.7*.....;......"P...Fm.%....i.}..n...Rw...W........8.s.....0}....Z...<.S.f.1.X....u?..f.Q.S8 .A...Ow.2.....Vq..-.:[.,.z.....hA..x=x..pq........Ij.a......!.).......[B..7z.V.Z.T....X.....6....fP....J.,M..
<<< skipped >>>
GET /wp-content/themes/goodnews/assets/vendors/jquery-visible/jquery.visible.min.js HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:21:23 GMT
Content-Type: application/javascript
Content-Length: 291
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
..........m.=O.0..w~E....e1'\.2. !1'.96r...T.......b....Ww5U..d....(........ q..;.MX.@...L...c<..=...Kt4..G.3x.e..>..2.@.z...:.T.....aA..h....R.........An...?s[.x.C........q. ....J.~....i...x.nv.../.Z.3=|.QM.<@..j...7.Q4...X...[.[B....2. .r..KH..U......C2...........].3.t_...>e.'V.|..&.(........
GET /wp-content/themes/goodnews/assets/js/all.min.js?ver=1.0 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:18:14 GMT
Content-Type: application/javascript
Content-Length: 43306
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
............iw#..6.}~.Y...&..m....yeY...ei.....i..... @....$..}...\j!..4s_.c5Q..Kdd...;.]......w..Qg...n7..f........)Zy.n]lo..V...i6.l?....N~......m.....y...k.....n...h...........}........oO~y0.dY....~..;.......&.u.OG.aoQ,..Yg<.[....Y.x.........7.7......F.m.voo..on......u..wF.|..d/....l...E..x.:.&...8'@...w7..b.uJO.......x...E.....u.1p......v[t..u.....s...!.-Z...|Y..]..?.......jo....7\.?...f=...f-}.~h......D.......<.K~P...........(......n.Vt..?.......'y....o.E1..../......?z....{...l....ppv.G....nn7.VF.f..v6..<X.~.....v..v...O.Ws..n.......C...f1.J.N....b..`0:....Y...~n.(}..o..l.c......h...^.... .....).....j..'..... .Z....u..z....h..8lg..L-.o.g.Y....m.y?....m..{..-....n...nAd6...Q......O.&....Q...L...v...........tA..Dt...K..1.Ac.h.'0lh.,s.K.8..........h]8......r.g....TK........w..:W..@.AT......w.V.3.~...x..-.]-.V.X.......o..r..v........z.b.m-.....g.....|.Mh ...f.6......g.:....oO....^..N.... [....z.........[`...~7...#....:......F<.)W....V.7.b[....6.......o........hy.......:..A.s.......7@. ...9.{.......rQ..p.Qo2_o.....b|..../...7.l......R.H......0<G%'..x..M.....3.m...Eo..|..4.nV.9OK?.nV........=:<,....|....k2.A..f..2L.ak..x)......\..?~..../.6....e......5.k=..........x;..|............Eg...5.....E..u..|...5..&.....S4\......Y.........#........4...-.>.X2e.......m.&.{[p..8.Q.16..[p.. .W.P.....yg.LX..^....9F.|.....7... .-J/..:...>.^O...;=......lrV..g.......f ....5.f....].OO[.k.L....4..|-.....XG$.}.. ....v.....]n.x.{..A.'..l........=.T6....N.hPK7......g.}..s..nk.-@Y'.3 ....v....5...1.....Ig....x&.E
<<< skipped >>>
GET /s/roboto/v15/3KAd02OzFSDbt78HTOt2og.eot HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: fonts.gstatic.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Type: font/eot
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 21:15:55 GMT
Expires: Wed, 10 Jan 2018 21:15:55 GMT
Last-Modified: Wed, 14 Jan 2015 22:47:27 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Content-Length: 23623
Age: 253218
..........l.eP.L.5xq..;\.....N...........pqw...!X....[..v.Ou...S=5?.jZ....4.....,...... .............Q..."(...8s)u...1 @...0..=.s.....%....p.....S..:.)n.w...;..k..`........(..i.....:.....j..sa.1..)r.4,...k.,v.|C....;o7_.V...c&..XW....'..{.\..<#.w.Ef.D..............'3R....-.8...3<z.D....*...>....I.=.v....7Jm.......S..R..$Wh.4..PvqL.~4....Q.zI............!.......8v..5...>..................4G..}.V}PY....?._..E{.....U}..9...7...|x........@E.g..."......M!..$#...qU...jm^X...H....0.....-|..........Q...<N.C.aVH...(......29(....f...x........ ....V...9.......(....{...*...r.1.V.[.,{:?SY..bD...bw.,.....b.N.U.....)..(e.......A..PV..>.".:.......d..m..........Zz..n....3L~[n....q*l..W<..d.W.pp&t5.._.!..!.....}D<^.ZO..N...._F..k.`M.!...D.H. .Da.!.....J........V)..y..|..i-...\>...D.?_.. .....2..o(o.......8..a.._.I.-...w Bx..u..g.....1.#...X`x...pxq.8....?S..l..'.P2;>...oa..p9......O$......M$.u...I....x7...0.?.A...*h..e.2)h?....#..Bh...P.q.].x.a...Ai.2's7.*.....X...9....".H..e..U...p)r.H.T.... ..c.._..L.F.Mf.'...l..?u;k..............n......@..F.\)..f.../.H....!.....QZ.....i..Q..8w.....P.G&y.N..p.}.G.ur..1........\.[.H...b.d.R....7.....@2...>....r.......0N.V.(S.fA ...".f..0...N.a........r.O.@....R]u\.j.....2B...I$F.?.,...)t..J.........I.....%....TNQ.w.A...e.`.....H..&..U<{.X..U7...(.}..dP..>..N2.F.. "A4V.N. `...`.Cx..&.!....r))ui..=B...5.........Ki..p].V...$".h.? ..Q0.2..P..w..NuL...Ol...C..:[!..~...<o. ...&S.. "..vE.........;........ .A....`k=.f.....l...>D....Ud.....ho.V...jV...:..k...
<<< skipped >>>
GET /s/exo/v4/hS2LLdHn7TpvEb4tLPbgig.eot HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: fonts.gstatic.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Type: font/eot
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Wed, 11 Jan 2017 06:43:15 GMT
Expires: Thu, 11 Jan 2018 06:43:15 GMT
Last-Modified: Wed, 27 Aug 2014 14:54:47 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
Content-Length: 15921
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 219179
..........e{UP.\..0.....>....ww'8...-.k..ww.. .C .......v_vO.............|..@..........`........?.....(U..$.........l....... ......a.....{....`.../B.../....8.....6\.................{..P.........L...'-..~.......Ns..Js.Q.[....2....{.....&a.9.5..d....t.....Q..9uTv....9..>.._0X1/...Z..NFv../.....r..!.........I.wY X.........$........G.$.............0...........2........|R=<....m.3y.d...U$..\...T.ZG.2......H.9...c.F......Ft..)c..L...........Zu..{.e.(..l...'.(.b........}....ErK..(.D.c.....[...G.9R......OR....m.'y(M..E....&r. .L.[...TE.V....*...a..Ldm.&Ix|..}].cB..&..#......{U..~.".6.L...f....?5.sG.)9bH@..4.. .........^....Y...7).Hag...$.T9...L..uT.A...t:'.P7......VEH...<..m0.R..#0...O...u...o.U......@..7...v4.E.....Z...A........H....#.3#=..b..<.q.A.DcRC.......kr.ji)&k.,.A..8..s..A..........G~.g.ymv./c...B...T.x.._....f.............T_..Vb...J`....g'8.xT...IH{.:05.p....N<EA....m.-~...`\..5oL....n...n.I.=|6..g.G.......9....!...Q&.9FSQ...O.t...0%......Y...r...Q|..gS.l..e.. .ZI..r.a.W....i.Z.D4t.0<p.....$......hZ....V.C..lw.hTC.Y...0.....[..{.:..Y...........f.A.zp..qH......]....BK*.e..)"V.....6.Ds.p....Y....r.....s...`..z..).\.....U............(X}......G..F.In..;.z....3W..L./...jXU.".L...*..8.v....>-..Y..^ U..a...&.....L.v&2SA(...T./K.B.<..3.?....u~.F..6.....)...\.6..A...$....<...6k.^..cP..F...Z......R.H...~^.....Q.U[&....~rr...X.8@.z.X....l.1`ZqD9'..N2.N2.N.wI..&!W.x_.....B&C.n..|.N.Z..k. .`<.......[..'...l.D....'b.Q......Q......j.gw.f..&..g.c".[...q......`~>...r>...v.f.....$n.~7....
<<< skipped >>>
GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== HTTP/1.1
Cache-Control: max-age = 564348
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Wed, 12 Oct 2016 22:33:53 GMT
User-Agent: Microsoft-CryptoAPI/6.1
Host: g.symcd.com
HTTP/1.1 200 OK
Server: nginx/1.10.2
Content-Type: application/ocsp-response
Content-Length: 1377
content-transfer-encoding: binary
Cache-Control: max-age=569534, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Jan 2017 09:45:37 GMT
Expires: Fri, 20 Jan 2017 09:45:37 GMT
Date: Fri, 13 Jan 2017 19:36:21 GMT
Connection: keep-alive
0..]......V0..R.. .....0.....C0..?0......V.T'S...q..."...zr.*..20170113094537Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U....... ...:.....20170113094537Z....20170120094537Z0...*.H.............;7[...>=r.n.."t.&.C..u.y^RE..v?....1..{..=.YFF...K...jV.s.1.tf.......7....6!....g.........rZ.a.E.:...aa...Lov...:..[v2.e..:-........d.....Kx.7_..;...B..>.E!.(g=..tsr.....HG....`.....z\h..@......8..a.....t... :...ub^w.K.p..@^.)...._.z,.JX.......F. U...Y........0...0...0..s............ ...y..^..g0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U....GeoTrust Global CA0...161208112535Z..171214112535Z02100...U...'GeoTrust Global CA TGV OCSP Responder 50.."0...*.H.............0...............S....!....,.t.?....d...M@.._.=.S..,."......Gdv._c..D1..N'E.:.....a2.......{/rD. .c.2..P...!.....Xn..}....{{.zI9.Y....../.....;.......fu..,...B._o..B..g....o........?Y\.?...y.H*..]yi.....3.......F.6.....Q.........{B..19..Kz...\z...P..._...-!.....'.Ym........0..0...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......0...U...........0...U.......0.0"..U....0...0.1.0...U....TGV-OFF-570...*.H..............md.....yV{......y:5..@l#..5.......o..X....,r}......i..3..o.e...e5..@..H/Q..;.vd..?.j.m....../hv..A.......g.......a.....G..\.'*.b..>.....L.Y.To<.@>...&1..9.w.....N*Au.e.....b..K...PO47.J.....{.C\....G..0/.a.Eo.`z.<;IA... #.''.CG..K@7z..7.\_..'.]q.f._.WN....
<<< skipped >>>
GET /wp-content/themes/goodnews/assets/vendors/fontawesome/css/font-awesome.min.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:23:18 GMT
Content-Type: text/css
Content-Length: 6840
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........]...Hr.. ...K.4.... ..~`..z0.....$.d.uY$...[...s2y.EJ..6z...V..|....8.z.......6..4..........\.\m7.i.Sn^....i.m...>.._@.L.We..?-...~)3[.6.......J.6.....o..e._.?n..._.6........%..5D....W..v(.....=...C.eOcW.}su.../[..m.>....o/...|.......-....?..Mw0..7...<.y....N.}........(.sC.....\B.....0...C7.....e'E.......n.L.... .b....m...O...jz.........|...........QZ5.....f.Z......c.`.....-.....>..u.:[..U...84..(.K..a.?4......4Uiz........_...u..g....Q..2..j.....=|...O}........%..P..~...?.2..E..=......|x.|x........^....|..M...}|.<..~(...N..y.....<..D.-......ve=.J.../.w..x.Y..V0 .4.c..U..m.r(............I.............z44...~..U........?.q0....K'..0....C.....L....2.\m....k-.G....G;X\;V.../E.................r.;....o..8...T.r.&.P..r...:.. \..}mhp....Y)........&.7e].u9.....>..!...^(;^......>.SJ....$M~...3..o.3.?.u...{....f0.}.........x{....G.c......Gmq@...=n..e.=..v........>......._..k.......e...._..........{..4:.Q.]..G.[.?..&&.......m...5./..L..g ./....[)/.k%_.V.U.F.. ?;S]..9...9.].t..{..6.?.......s......c.........Q..|.mc.._.:.a.ZO?~..p..!fg........C1..~0...F...E.....)..\9)..TE..P.9.._W.....;...2...].~.....p:../K?...G.\........N.........(......Sj...;.7.c.....v../p...T.x..a...*.L..UW...F.....(gP.nX.`:....}...Ib......O...............*.(2.[#o....n..H....ZF6.t...H.<....W....\-#...&-j .h.......u.. i..."l...b...xS........._.N.'b.a..>.11...\-.....`..3...9P.a.5&W !l..X...e....p....\."..Z$q......DTY...*@D...\.*H.......7~.:.Z8...b"..Eg{UM$..[...j1...&C.&!$....I.......0...Q........9!2(.......>E.!
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/login-register/assets/login.min.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:58 GMT
Content-Type: text/css
ntCoent-Length: 137
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Vary: Accept-Encoding
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 99
...........K.J....O...-JM.,.I-.rS2........T...$.pr~^Ibf^jQ5P.$.*..$.V.hc..ru...........T.... .c........
GET /wp-content/uploads/goodnews/style.min.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Fri, 28 Oct 2016 22:01:46 GMT
Content-Type: text/css
Content-Length: 77624
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
.............sc..0.W..Tj..K...mW.....lev...$.s.d..VZ.....q.._<I..s.l.LO..t.M. .. H.<..^M..f;x......_.8.uZp..^.]......z..x..,7.M.._...7.m.a;...k....n7.....gg.......R{...}..../......d..O...d3.5{.f;./6{.....f;_-...u.w.Zm...U3...........|......4S...^...w...f1.xz.XM.B#...jo:Y..l.n...u......W.t.\....1.5..d1.,........Z.t.\m..f..Y...o_.....\5...-.....l.,...6............-ve9;..A.7.u..B3....;.......[.n.........|.h..;_.A....v..>...0.......|o..-/Y........f.K..l?.....:9=....RP..As}.J...j....(xkY...b|6]-V../.c..\O.b1h......7.....!...gg$. ...f..<]7 '..YU.Hj..9..G..$..1P........".....%i.t.6....y.X.?e......M.C_..7.@ .....;.........u.....Jq.......Mn...............L.E*2..W.......?...#a.c..[..ro......n.<..:a...}...M.X'.....-.8._T.J*r.n.../....&zG....b...A.0..t.........W/........`k.I.h.z..w.-&77.....9e"g....,.f5.....o`hO....{..Px'X..br.....NOI.....f8_.....yy....l.:..".;k.K..d!5...U3}.V.tu=...=5............>o./..........|9..[....1.3..;.L.D....O...@._....mcA.4}.1TX..ce"..K........*......GV..}..S..0U..<7..|6.b:.?.......=........t5..W.q..e..).q.?...28....^v..Co.......br.i....gb>.*.@.....]..\5L....XH.C.y....._..xt4:...........{z...r.q....f.X........1..nf....9.>.,g./......cp./.Q..Hx..C......k.K...~.........I.L.d.....s....p........rr.....s1Yl.c.....K...j.?....y.....&..2..1c.......2.i..e'8..;&..x.B........0qY...........:.@....F.....4...Cf....w...F....b.$C.V..Cc..nV.... ..Lk..-.=...zr.?......(...70.....X....p..d..p.>o....7..v...h.\l. ..lO.G_...Vj.g_...d}1...3..lB..O_.^.i(N>..MA..)h... "Kc..p;...".Y0M..5.sW..
<<< skipped >>>
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Sat, 22 Oct 2016 09:41:27 GMT
Content-Type: application/javascript
Content-Length: 41437
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
............{w.....w.) ...C...,'.2..%.VbY.H9N(n.!8$`....D..w.......@.>{.{.....1......................7.^<{...'...^.....C1k....5._..?........y.(j....d2.......o...=..w4.....g..l..].....x........t...~.N.Z.....b...j....% .......h..3-./....."_,j_.>..:X,......>./.......\.\..L3HM...|s2n..SB.....G......(?......w...-B.v...;....?i}.y:..T..;e!......lx9X.....vw..R..e>....b</.k..y1.-.E..........2~..}.o.............<..^4....#z^\..E.eu....e....<~n..$7..q\.N.O.<. F..&o.<wwe{....|V...u...4....E=.du.q=-..rZO..............Y}.$.UV.O.E=.guF.ROGY}.$SO.Y}:...........'.ey6*....&.K}.%..&..z.L.f._&.E>......-.}y.....Y...^..".....~5yO...^...........9p.u<-sm8.}...K.>...8.?....Y.j.j2./...q.. ..Z.i%Gz.^K5...Z....O.zI.....8.a./!..^.........G.u.($...Q.....w....hxU.i...|]..|.}.....X.............O..pGk..o.....pK..f..<.....E.X.-A{..}...KW...y.0.; ...C..^]..E.../ m..r.8.6>.,f.".&.[....E..........8..&.Q.Q:.Ggy.....d9/../....U\.G.........:.......b1....t.Hks.........<....x.B.~..R..."_..Q.w......._L3/!...G..!F..y.~.}.f...O......-'^...2..........9Inf.b9.....O...ZO.x6.?......o.E..a.Q#.]....^...E...&.F.E.|p^.7.i.k..b^.O...z....`"..............B:9..\..}.M.............hj.. .X.^..)..g.j.t.....W.<>|vzx...Q.2.../.x.y.^.}..3p.O........W.>....!O}.>...3M_?.....$}..S.O_....u...N?}....x..4P_v.....u..o^.~.....=...,......Ox\.......W.;Y..H...../;...7..=.<L...mgH.7..>4.2.`..j.P?t#3.LN.G. .>.Roo]..k.)a..k....l G.....j..q.R\.\n)..`..n.... ...S@.....$.q.U.u.!.........y....r.......|..|..Q...gP...~..%w..O
<<< skipped >>>
GET /wp-content/plugins/xt-galleria/galleria/galleria-1.4.2.min.js?ver=1.4.2 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sat, 22 Oct 2016 09:43:47 GMT
Content-Type: application/javascript
Content-Length: 28374
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
............kwS.....|..$D....UIEF0\@.NS.].N..7C...R....K......s..$S$...'......:....n.-.'..d.^Tu5....w...._wO''..z..&.E{..f..;...8..>v...b..8..Q....~u._..u........g...........`1.u..zvxN......}={4...NuJg...@..^....Y=..N...o~...Z.N5-.X.'.Qu..~.....i.....].sV/........X..D..{U..tOf.`Q?...q.u:|G.C:=...t.........u.5lu.N'Wuw8........o....s4<.:_l={......^l.....>....o................n....;.a..._=\..i......>..Y.7.......rT.....NN?R.?.E=8.y.....a..b.........[.=..X.[}.....z.o....-......by.v<...F...|1.-..l8../.....z.-..5...[l.....Y...r4......=......p.5<....?...O..Z.........o&.z..~..&..~..Z..r...u...`...'.....t4d.....B.j.ag...E{.9...w..v..|...&....s.h..:.e.]{....X......l.fq[....O...U...:........t.4..:...r...3f0.~..g3..y...}.....{......b....;...L...n.w..^.D...q.ppZ..E.U......~nLN..,.fh.......4..Q....:M.z...8Y..o...p...X,.....v..m?.i..o....nu...yHQ..S.dr............*......v~z.S.x...rz@..t.v.....hqpt....=_P.o....I]....;..tv.U}..>.....iih......w. 4.]....^\.....u....l....t...{...h...O....p......s[.....wo.F..?....p....N..9........[...;...E....5^.>v/........r...1>.{.].F....FC......o/NS.6...yc6....w/..8....`9Zt.1=o.............d#...?.2..AE.@...7.j..._.U..z..Vl[m/.T~m[....w}/........?.q .n..7....M{..H...`v^..O.../'...]..^\I[.....t<vo:...:.E.......S6....km....8....y?/.......U...] ...L.:..k.^lT..e.3........Y..E_.&......w0...k5..z|..8.oo.....^.J.....]...@..a......Y.. ........E.c.F.T.s....EU>,.X..U=:..T..%....?X.~...t.U2....[.~... ....\.N.2....hM....e..........*.7.....:f....9.A..=>j...p.......P4tl.c.....
<<< skipped >>>
GET /wp-content/uploads/2017/01/Tren-Raylarında-Telefon-Şarj-367x245.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sun, 08 Jan 2017 14:00:43 GMT
Content-Type: image/jpeg
Content-Length: 41515
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$........o.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......*K....iU.#..=G?..S.....'}.......I.K.bK..P.. S..#.~;.......:^..n.j..`2..B0}.o...6Uh.W-...*.....p...yJ......F}...M.x....x...8|..%.W.8.....L.y..# ;....=j....3nZQ.Z)e.Y.w....\o6...Vm..;\.t=n=Z..e`n%..3....y.H...l.....yq....Ldu...W.Bt.M...........?.N.,`\.%..wu..g.W4..{....MI].f.\j..o.......1.O.s..4.Y....X.T*.c.w.B...b.F.._$.S..i....[.@.......??...g.{.4Ta..q.ZW.'[d.|...!.9.............!....?.c={Wqq..h...waG.R..=...........X.9.z@.F....x3Z..^.J.......Wa.&...y.J...#..4...-....4.....zT....o9..crP.O p?J.X..<.#).Qz......-....$mf...Ig...............;q.g.:.VV..mJB...n9.W...3Pi:....V.L[.^\..q.....?..zy."..$.9.[....>....O.....H....V..5..[..30..*...Z.....Fm.[...bCv.;.....x..N.;{%..o-...*G-....t*.....1...a...I...B...."2...w.H.c..t..wL...2....O..)...=..m..w......4^j.....H.G..`..#.V..6..)f..D.w:..Z..v.@.....}z.W1>........O..!...1.l.X.-....5.`..'.
<<< skipped >>>
GET /wp-content/uploads/2016/10/farming-simulator-17-Domuzlar.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sun, 30 Oct 2016 21:05:28 GMT
Content-Type: image/jpeg
Content-Length: 131751
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF..............Photoshop 3.0.8BIM..........g..HIXMYJLsr2V-X5lI4T2H..(.bFBMD01000ac00300004f3100004a70000041750000307b000069a50000b018010078230100942d010087380100a7020200....ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....|.i.}...0.....C.....................................#...!....).!$%'('.. . &.#&'&...C...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&...........".........................................................................................................|"...v6d*So.....=..z3.G.......3...e.U..a......w4sz8......YUU..... %..2..er.Q........r.^.3l5..Y-..l.5.....`..q..4.]EjM...Xa..(..p.c..4..B.......g............,.[FX....T........]..,5...)q...E..xI.|...K..`..."...j.TP.j-...... GQ`...V%....J0t\...."........Fo..Mt.%.d...U.. Md.Mf...o..,H.J..qW....O.[ ..aK:j...M.Q.....k.d2.U..c.h.c*3....CA..gXr......Q._.-9..&k..R...I.u.Z2..$..Yu(...Pd..o.........{$........]T...............K.JV..........5eH.....q.....s...Fyb].Ur.....MLa.I2K.R. 3^....M[.c:..hd.61.n.KV....;...k..oE...{.56=IF..6~..... ib....,..!...,.; y.ib....R-])..f
<<< skipped >>>
GET /wp-content/uploads/2016/11/Avatar-2-165x110.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:04 GMT
Last-Modified: Sun, 27 Nov 2016 10:38:22 GMT
Content-Type: image/jpeg
Content-Length: 6901
Date: Fri, 13 Jan 2017 19:36:04 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......n...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...Y............n..F..........D'".k.....6.u[...Z.....d....._M...,......5.7..0.?...........<.e'.FK..jE.e...=...p.;1*.s.Ta..0...Z..L.. .m........E."5.....#........A..I.....0.5!..<.Y[/.".s3...q.... ...,.H.Ky......w...u..]...J..<.K1...D.v......b..6... .8Z...._5.ab.zy.X........6S.*pA=....O.=..]:.....14.1.=A...q.. ....45.o.n|.....=........tHy\.q....a:s...j.:....Y.\w.2..X..8P[.....*....Z.[.^.s3.2.Pr#U..v......k....X........W..%.*}..$..e.#.....s.@... ..|egd..2.g.|.uO..ak.1..G.....XnS. ....H.C........l_H.4.u.j.R........f.W..VtdQ.3`t..jKi... .qx..........N.v.u[.R.*..k.........LW.:.........N.L...^..1.?..d.T\Y..08R;q.W..[a.S8F.7......C....]C.7....O...@.....5P.$...Fp. ..<,.q=.?/).......Q........4j...4......H....&..6...C.\...V"...=pkK_dc...."..s..6....|;..[n.z.[kl.......(....2.S.H.V....V..Y....9?^.......w.~.&.|...nGm.B...e|.....r.......n\.....
<<< skipped >>>
GET /wp-content/uploads/2016/10/ZombiPio-Nedir-Oyun-Oynayarak-Para-Kazanma-1-165x110.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Sat, 22 Oct 2016 10:15:55 GMT
Content-Type: image/jpeg
Content-Length: 9784
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................n...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..G.7.c........\ !H....3...s.k........bO1.L.>_^?.F.O.js....&.h"dH.>.F.I..Mfi..\.n.. EI.)..8..g......s({....e;C.s..l#72&..C2...y...Y.%.Xk...M9.....K..0{c9.{....L....Yr.2Y.w.....8....o..{F.N.ugm.Ki........$`.....w..{...Q \...j.. ..M..".:....Fcv...........\...q.ay^xn.lN72,. ..9.......$..As..9.-m#.....Tmp...y.......?.|g........q?1#;.......=.s)..mjw...J.9.W.f.D..!Vx.I#.....ry...=..r..1..7V.>.......1.r..8.*..I..].n.....\..K`.Dx..,8...=...x....>...L~X.......}>c...J.q..twP......o.^[%.n..ee'......\...Mq{i.i#.b....Bv>..Zf.....2c.E...1..u..s....HR.. ....M...#.{.u...R.o2I.Ia...y.5......'..^QO#.....Fi.s3`u&N....)~.X..6.................)..J;._...i.0..g.<....W.~tQ0FeA...$.....7@.N.$zn..=...3..\uP..=9....s......[.]".i4mz5o6..R...Q....s.z.Z-F.z#.[}X.. E...\..8.{..-:x..S%.@.730......^..........m.Y.z...7..6...6..`.W....<m..Gow..[...0...
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/social-share/js/xt-socialshare.min.js?ver=1.0.0 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Sat, 22 Oct 2016 09:25:11 GMT
Content-Type: application/javascript
Content-Length: 442
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
..........}..n.0.._%.%......;........ P..!.1.G2$.k...G...]._._"..#_....x.t{46....'^.VGt...../b...........7...]....-.|...p...:8.P.C......#...%gh...eB~}.N7.T...V..J.0.....m.....kU@......t......y.gl........x..s'22.U..5_m5a1.z..."x...E.{...I...bu...k.....%..^..VB....Dk.z .......sx..&.M....Xqr0.Mgb.....QO.7w?.&..5D].Jt.7..vy.O........$...Z_g...c.ej&c.v..L&Z.C...q.....K..dp?.u.).....,H.GT3..B...y.09,.....*..f.......u...x\.....>A=|neR6....Uf....HTTP/1.1 200 OK..Cache-Control: max-age=2592000 ..Expires: Fri, 20 Jan 2017 19:36:06 GMT..Last-Modified: Sat, 22 Oct 2016 09:25:11 GMT..Content-Type: application/javascript..Content-Length: 442..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:36:06 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive............}..n.0.._%.%......;........ P..!.1.G2$.k...G...]._._"..#_....x.t{46....'^.VGt...../b...........7...]....-.|...p...:8.P.C......#...%gh...eB~}.N7.T...V..J.0.....m.....kU@......t......y.gl........x..s'22.U..5_m5a1.z..."x...E.{...I...bu...k.....%..^..VB....Dk.z .......sx..&.M....Xqr0.Mgb.....QO.7w?.&..5D].Jt.7..vy.O........$...Z_g...c.ej&c.v..L&Z.C...q.....K..dp?.u.).....,H.GT3..B...y.09,.....*..f.......u...x\.....>A=|neR6....Uf....nt>....
<<< skipped >>>
GET /wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Fri, 14 Oct 2016 12:10:14 GMT
Content-Type: application/javascript
Content-Length: 5800
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........\[s...~?.B....@H:...e...I.UI...:N..*..I.....lE..........d.v_l.3.....4t.....O...{..7...>xY..E<[e.g..Y.o.]..f|rr.'M..QR\.5..(67e.X....b.N.:/...:=(.eV.$.........V..........0.......*O.u.E.-..\..Q..A).....I...`..?...uB..qp...7..7......<_gGG..._.S.......z.IR....*.........>.q0.}._p...._....|.d...u.~^.Gxf...uVV.r....P..x....%..:.h...."....i.b.WUV..O.x.....b.m.....k....._gI..xW.5.....|}....-...{1D...?=..E..4c.i..e..d.[@..:^ya>/...'....&N...~..2..o.*....He.eF.^nK.......URl2......$TIY.VD..z....k.....&.R~\........)...~.....* .u...:N>...^C..k..x.].......Yl..]x..Y\g.F........2."#.H8tt.//..V.@.A.u.......Y..A..t.Tg..Ngy.W$..Q.G:.3P..W,]V._!J......:...<..7.}-..p...:.P..^..h...$>:.e.....l.NCH..iV.eq....J...w;..p-....p.Z...|....u.....~.~.sTN.O...(..ef. ..A...F*...1........_..~@...^..X.K.....v...sco..l.-...]g?.2......$Re..b..A.a..(Y.0 .0.G8...kd..D.l....N.....6..!R......../f."...Y..O..~@_.O..<{ck...2?...N......x%..E....3....*..6Z.8....@.....4.~....Tic..<@<.....0...|....E.....i..k.A.^e.,u.<..|..@..G.|<.tG..]..lN.M.r.~....@.P.:.=.g..=]qXki......s.Ll;....k.(....$.m-<:.UNo....3..a...Du.s.% _ D..b1T...D.0LR....O..;=)..z7V..s"..h...W..HyEu.q.).....H.d....e...%w....O..x./...r_D......5.......A0>PI.'....QU.A..[........e..k..tQK.P... ..,}..Z!.s......<_.L..N....&K.G...Rp....N....9.j...........}T.L..rO...0^k..u...Yxx....~......q....0C........Z..8..V.`.SY\.]k'.....@.lb4e........8L..l.f.M.(^$..0.(.W.x}<.7....-....BC;..)3.......= ...(..U.W..............D.E.....{.Q......=..'..kk..j3...
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/login-register/assets/login.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:57 GMT
Content-Type: application/javascript
Content-Length: 790
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........U...6..Wr..J...^..E.C.....}....T..-..|.,..>.?.....^.8.L.4..#.....A4..:.Q...9.=.:.g..........Z....}t;co..nW.]O.x..G....R...f.v&D..k3Z.....d.RQ.l.1.z*..O_...|[TI\...@1....*_..#.G..,.u.T....H.<i...........z.f.4P=x...O..1z....b....P...#.(..]CY......dlS.B.....q..8K.U.b.%.&.......7..r.q.1.....W.....KTOG...(2....`....k.2...TJ......x.........zP./...`.........'s....5.mb.....EC=......t...!.C.E..{.d>b...7.a...B..ay..t....[.i.a.v&r..9...as.~e.9..B...01...<z_.K......o......b...Y.,.W.....7.w$..1...e.S.8_........l..=#...m%7....{.%\6....0......U.rvz.9.q..B.l....w.......H.... /.\...o..C..d.WeI............\.....<\....~.2...;mZ.?...........P..R..be.#..?.F..5.V....g.s..y]..a.i.i...4&.r[.....eB...Au.r;.a xz.Z......?).]w..x...'N.V.0.W.rg>AT.b.YG..7..m..?G..C.Y.j...|.}..........B.m....k.L.......
GET /wp-includes/js/comment-reply.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Fri, 14 Oct 2016 12:09:08 GMT
Content-Type: application/javascript
Content-Length: 597
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
..........uSMo.0.. ....*Fzm*.h.a....;.E!K..Z.<[Ng8...?...7........9S.......P.=|.Mu.u^G.<S".Z.>...D&rQ. ca[.$m.c..r.4.n..V^.[...u.......pQ-%3.X..'c....6>..".d....9.wl...*.U.0.....o..6cO...:J J..l.@[.ovF.......1.K..u..^..kc.........'$...a...T! .F....6...c...^..<.Q&.a..`.o.......(9.O..%b...;."c9.C....d.\.k".K...q:.T..Y]...g..|UZ.R....'D...GvSJ5o v.?.:.m_.[V".".Oo."....F.......h..'..N..2.9'V..ml..Ye.9k...W!..(....b[..s. ...}. ..~ h,4..E0w.....g.Mx...9.....e...,.`.K..f4.......]...%!.Z.......Pz......S..).1...2O....u6.....7\..V.'...JW..B.:@...>dI..n...h..x.*.....q..)<......E..Yo~.u.3....._#.FX6.......
GET /wp-content/themes/goodnews/assets/vendors/sticky-sidebar/js/theia-sticky-sidebar.min.js HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:23:32 GMT
Content-Type: application/javascript
Content-Length: 1437
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........WM..6.. ..Y..e*.B...^..J[.J{&`.....d&.........io`.....eq.3IY.Q|.aQ..$4}.4;\^iNv)Oz...../Xr.X-SZ..J*.I.c..4....V_S...w.....w&%;....SI..?...2^F...?h..8j72.!y...=.K..pFG..\..j..^..-.a.f|..):v....9.a.4...}..y....`qZH...H......"....K....".EV............}..cIEH...z...~....$,.;._3...@N"..B. .....@. ..)..S..Z.h.a....].b$d......G...ZS.....\.o8.'^/d....9.=<1.%_SY...."H=...%`...*.Hrm7...!..Y.2J$.v....'.......#..$.P.<?..W `r"z.!..D....g.P(x#.....i-....G5....t.;H9...3A>;.^T.-Fg*($.p[.;...y..C.v....p.(....|p..f.k...GA!}.L..#.f.$.H..e..X..8m$T.'G.......msz~VU...T)d&...WT.H.PCtM...0....m.q.=...k.@...8...<..).,....T.U..}....8]...e....Q.!T.....(..\...?.^....v.5z..2.YM...i.9.......D0..?...@.../P.c..fE...9.#..I.\>)..':.W...`=.d...a4..);....SU..L...H.I&.'.Z9..Z..)K`....(.-...w$P`;._.........v.b.....jxl.h3,....i.-#..-z..G u"B.%.r....6q..@."p)O.(Q..3.L.qG....M.A5.....5....y.. .._..y...M....._...N....{...<.Z..i..}.=0......"c.x]..-...u.77>7<.^..........Hk....h.......d..P9.._$M &....r....@........A]A!5.....aV...|.N..4]....... .=..}..9X:.4.]..._..'.................M..u...:..3...L....bK0...[.L......./(..VAg.uD..B![..Z.60.Iz.03~G`?".FvA...6%..V.n....!..9....9...)S1....~O.6..5z[..~..i...."`:..#3....RM......gk.".]....8..n..Kw......?..#..d..k..>P..P.........vpw...Uv....8F..6..3x...~..W..........0....!T.&...O....n....V...,UN?..4..p.m.Z9.]...Y.jG.<m..z...7;.c..].L.b"Z.*.K.G0<....{H.#....,.......J..6.tO.....Q@.<-...]..l...>.~....";'q........
<<< skipped >>>
GET /wp-includes/js/wp-embed.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Thu, 08 Dec 2016 17:13:47 GMT
Content-Type: application/javascript
Content-Length: 765
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
..........}TQo.0.. .y.M]..$$...F.&..a.$..\..xM..q:J..v..:.Qx.....|.}.(mJ.mUR..lM...j...$...h..6...5.h.,.;P\s.S..~.IY......P...p5R.[..y.R2.:...C.x...O,fs...^...9.|v....n.......VN.m.nu..h.pZ.....9..E..S0.L_W.G,aIZ9..0.'V.Pf>Ot....H;..<2".....i......... .K.X.\8U.jN....F..=~.D.LQ!z..!.F.N.$y...K.K..?.y...2.lr.....J.T....).`^-.....q..P<#..a.!.....p...`..k.64..(...8.y!..-%.1.%.\......2.........[.....`.0.*...U....3.3..l.]G. n.....7.#..WX.U.lI......:.....^....?.X...s<....3.ag...~Jr..e....C.g{............_......_...M.Z.~U.0....$)..8Ih..p.......Q\..j..)e*.........6.c...=Ar.Y..".E.b2.f.....n%..6{..1.$~.(p........p...MR.Q...3R.r...ws..;.<.....(Qx.0.{.s.;H...3...0.....[...A.....B.....R.....\.l....3.6...-...^...x.gm..y.3.9_L.%./.g..sQ)|q.>.!v_..#..[z..$7.n.V,....[@v...HTTP/1.1 200 OK..Cache-Control: max-age=2592000 ..Expires: Fri, 20 Jan 2017 19:36:08 GMT..Last-Modified: Thu, 08 Dec 2016 17:13:47 GMT..Content-Type: application/javascript..Content-Length: 765..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:36:08 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive............}TQo.0.. .y.M]..$$...F.&..a.$..\..xM..q:J..v..:.Qx.....|.}.(mJ.mUR..lM...j...$...h..6...5.h.,.;P\s.S..~.IY......P...p5R.[..y.R2.:...C.x...O,fs...^...9.|v....n.......VN.m.nu..h.pZ.....9..E..S0.L_W.G,aIZ9..0.'V.Pf>Ot....H;..<2".....i......... .K.X.\8U.jN....F..=~.D.LQ!z..!.F.N.$y...K.K..?.y...2.lr.....J.T....).`^-.....q..P<#..a.!.....p...`..k.64..(...8.y!..-%.1.%.\...
<<< skipped >>>
POST /wp-admin/admin-ajax.php?lang= HTTP/1.1
x-requested-with: XMLHttpRequest
Accept-Language: en-us
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept: text/html, */*; q=0.01
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Content-Length: 48
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
action=ajax_load_socialshare&post_id=693¶ms=
HTTP/1.1 200 OK
X-Powered-By: PHP/5.4.40
Content-Type: text/html; charset=UTF-8
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 976
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:41 GMT
Accept-Ranges: bytes
Server: LiteSpeed
nnCoection: close
...........W.n.6..v..P....b.Y..r...vY,.upDQ2c..H*.[.Y.4}.."...7.n-...c.......,c..p.:.^...QP!.d.g4....a%k...2..G.}...*(....9...k........0Q`.%..|0.1.Z;F...0)....l..4........b..|. .[P.$.8..4R-..w..`.[sr 4.r..2C.].HA.j...E.!mV.&..\.........[..Y....=.!."a..1. ..Z(.'....&.....!..,c..EUx..EuW'n.../g.{.3t)dA?.L..u.v.U-.#.U..jV...Tx|...z.A.g......q.K..;t....3.."#R.....A.F.........wK.#..y....L.....BX..`.X... .,8=..,.....x.#=.U..#.....Z....{.s.U..le.w....FS....js$S.L...}L....\.m0.\.VL..C..6F.....(V.j...4.>..h8...........c.....t.R.~...-i.........D... .!..mr>..>.......}..{..`.O?..\L.GOU.b9.>..&.g n......q.....SN.....D.\.i:..L.m.0.?.d.E.)S......<x.?Y.{.. <.{. ..g.flE9..qN..x.wa...`...%.0.i(5w.6...3.....C..!..Y.6u`r........VB.N....'#......-.~......^z.".(!N....#C7..[..t..V.~-..o]g.hqW.`...D(...k....9..a.:...Q.l....[PV....k......L../.y.....it._........Id.[a.BH.........^.....v.F.e..2........(A_..~..o.Q......!..........xw.`.iE...VwC...... ..s........ .~.P..nwQ.)........B..BH..0...HTTP/1.1 200 OK..X-Powered-By: PHP/5.4.40..Content-Type: text/html; charset=UTF-8..X-Robots-Tag: noindex..X-Content-Type-Options: nosniff..Expires: Wed, 11 Jan 1984 05:00:00 GMT..X-Frame-Options: SAMEORIGIN..Content-Length: 976..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 13 Jan 2017 19:36:41 GMT..Accept-Ranges: bytes..Server: LiteSpeed..nnCoection: close.............W.n.6..v..P....b.Y..r...vY,.upDQ2c..H*.[.Y.4}.."...7.n-...c.......,c..p.:.^...QP!.d.g4....a%k...2..G.}...*(....9...k........0Q`.%..|0.1.Z;F...0)....l..4......
<<< skipped >>>
GET /crls/secureca.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Thu, 13 Oct 2016 09:30:22 GMT
If-None-Match: "b6a46da3cf1aa70c10b101b12c9733f4:1476351022"
User-Agent: Microsoft-CryptoAPI/6.1
Host: crl.geotrust.com
HTTP/1.1 200 OK
Server: Apache
ETag: "52869abfae9354140d8141083d09206c:1484335820"
Last-Modified: Fri, 13 Jan 2017 19:30:20 GMT
Date: Fri, 13 Jan 2017 19:36:19 GMT
Content-Length: 325
Connection: keep-alive
Content-Type: application/pkix-crl
0..A0..0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equifax Secure Certificate Authority..170113192300Z..170123192300Z0,0....%...020514181157Z0.....3..020515130611Z0...*.H..............P.Z3/.\.)...3M..`.........q..nx.... z..ejf...K@..P.^YX ....[Fv......~...TU..n.*.D.f.\Vf...H.@.|.i....Hi...7.m.>BV...4&]yam.%._HTTP/1.1 200 OK..Server: Apache..ETag: "52869abfae9354140d8141083d09206c:1484335820"..Last-Modified: Fri, 13 Jan 2017 19:30:20 GMT..Date: Fri, 13 Jan 2017 19:36:19 GMT..Content-Length: 325..Connection: keep-alive..Content-Type: application/pkix-crl..0..A0..0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equifax Secure Certificate Authority..170113192300Z..170123192300Z0,0....%...020514181157Z0.....3..020515130611Z0...*.H..............P.Z3/.\.)...3M..`.........q..nx.... z..ejf...K@..P.^YX ....[Fv......~...TU..n.*.D.f.\Vf...H.@.|.i....Hi...7.m.>BV...4&]yam.%._..
GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== HTTP/1.1
Cache-Control: max-age = 564348
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Wed, 12 Oct 2016 22:33:53 GMT
User-Agent: Microsoft-CryptoAPI/6.1
Host: g.symcd.com
HTTP/1.1 200 OK
Server: nginx/1.10.2
Content-Type: application/ocsp-response
Content-Length: 1377
content-transfer-encoding: binary
Cache-Control: max-age=569527, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Jan 2017 09:45:37 GMT
Expires: Fri, 20 Jan 2017 09:45:37 GMT
Date: Fri, 13 Jan 2017 19:36:21 GMT
Connection: keep-alive
0..]......V0..R.. .....0.....C0..?0......V.T'S...q..."...zr.*..20170113094537Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U....... ...:.....20170113094537Z....20170120094537Z0...*.H.............;7[...>=r.n.."t.&.C..u.y^RE..v?....1..{..=.YFF...K...jV.s.1.tf.......7....6!....g.........rZ.a.E.:...aa...Lov...:..[v2.e..:-........d.....Kx.7_..;...B..>.E!.(g=..tsr.....HG....`.....z\h..@......8..a.....t... :...ub^w.K.p..@^.)...._.z,.JX.......F. U...Y........0...0...0..s............ ...y..^..g0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U....GeoTrust Global CA0...161208112535Z..171214112535Z02100...U...'GeoTrust Global CA TGV OCSP Responder 50.."0...*.H.............0...............S....!....,.t.?....d...M@.._.=.S..,."......Gdv._c..D1..N'E.:.....a2.......{/rD. .c.2..P...!.....Xn..}....{{.zI9.Y....../.....;.......fu..,...B._o..B..g....o........?Y\.?...y.H*..]yi.....3.......F.6.....Q.........{B..19..Kz...\z...P..._...-!.....'.Ym........0..0...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......0...U...........0...U.......0.0"..U....0...0.1.0...U....TGV-OFF-570...*.H..............md.....yV{......y:5..@l#..5.......o..X....,r}......i..3..o.e...e5..@..H/Q..;.vd..?.j.m....../hv..A.......g.......a.....G..\.'*.b..>.....L.Y.To<.@>...&1..9.w.....N*Au.e.....b..K...PO47.J.....{.C\....G..0/.a.Eo.`z.<;IA... #.''.CG..K@7z..7.\_..'.]q.f._.WN....
<<< skipped >>>
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEg0aOXToYEC HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:31:25 GMT
Expires: Sat, 14 Jan 2017 12:31:25 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 284697
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110071335Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..H4h.........20170110071335Z....20170117071335Z0...*.H..............,..P...<...0..2.j@Z6..Z.....0..3..'...)O.......A.2.....9_.i.@. 4.aq..tb.I../=...1 ....o..3.e..`.k......)....US.q-3.....L.t......p^AM..i..u.....a.Ln[.nCc............/....ys.R.0.p`.M|hU;U}^.-.j.O..8..$.............S>...(b....&....V..yU'..V.....dh.._^D.<..-e....
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGUhZOTmlkeE HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:31:49 GMT
Expires: Sat, 14 Jan 2017 12:31:49 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 284673
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070920Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..e!d...G.....20170110070920Z....20170117070920Z0...*.H................:..........F.....T. ..a.Mh@#...Z....]p.{......y%.K...S#..:.um\...z[.~..I.s.-|R..>Y.`u9.....G!w.........L..M....E.........2"!Uc9I...x...>U.u......=.aXU.sg..M..\m'...M..J..........).......x?7.V..N|..e.....j.XZ....D.9.j.U.H...KM.....#P.p...3;.t.....6.,._.dHTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:31:49 GMT..Expires: Sat, 14 Jan 2017 12:31:49 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 284673..0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070920Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..e!d...G.....20170110070920Z....20170117070920Z0...*.H................:..........F.....T. ..a.Mh@#...Z....]p.{......y%.K...S#..:.um\...z[.~..I.s.-|R..>Y.`u9.....G!w.........L..M....E.........2"!Uc9I...x...>U.u......=.aXU.sg..M..\m'...M..J..........).......x?7.V..N|..e.....j.XZ....D.9.j.U.H...KM.....#P.p...3;.t.....6.,._.d....
<<< skipped >>>
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF1gScbx3zO7 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:51:29 GMT
Expires: Sat, 14 Jan 2017 12:51:29 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 283493
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070338Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..]`I...3.....20170110070338Z....20170117070338Z0...*.H..................h'...?..v'..$.3.bn.4.8.....s..f".=.w ....r.P[U..?C0.`\...O0...~...p!|b#Lk'...K...".Bl'.."Z.US.6o....88}.,%U]...-.Z.?......2T..d....%.t.....F.{..!....Q.R.....Z.#j"..=D..*.9...Q..(x....#e|.......6. .....&@S.S..{.F...hJ.....L.>k....:.N...z....3.....;3i.oHTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:51:29 GMT..Expires: Sat, 14 Jan 2017 12:51:29 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 283493..0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070338Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..]`I...3.....20170110070338Z....20170117070338Z0...*.H..................h'...?..v'..$.3.bn.4.8.....s..f".=.w ....r.P[U..?C0.`\...O0...~...p!|b#Lk'...K...".Bl'.."Z.US.6o....88}.,%U]...-.Z.?......2T..d....%.t.....F.{..!....Q.R.....Z.#j"..=D..*.9...Q..(x....#e|.......6. .....&@S.S..{.F...hJ.....L.>k....:.N...z....3.....;3i.o....
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAgBmA6zq94/ HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:41:53 GMT
Expires: Sat, 14 Jan 2017 12:41:53 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 284073
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070538Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.........?....20170110070538Z....20170117070538Z0...*.H..............u.e..v.(.YG>..x........ ...z.R...%.....q.p.i.&{.!.7....,...VD)#m.?.Z......~..c!.P...TY........P 0.r..6...{0.7K....;O... ........tD....!v\FhzC...t3.....7 ......b..{..vK<...U......Y.%......._d...!....8.W....v.o.......Fj.|r.'..L......p..?......j.....V...?...HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:41:53 GMT..Expires: Sat, 14 Jan 2017 12:41:53 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 284073..0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070538Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.........?....20170110070538Z....20170117070538Z0...*.H..............u.e..v.(.YG>..x........ ...z.R...%.....q.p.i.&{.!.7....,...VD)#m.?.Z......~..c!.P...TY........P 0.r..6...{0.7K....;O... ........tD....!v\FhzC...t3.....7 ......b..{..vK<...U......Y.%......._d...!....8.W....v.o.......Fj.|r.'..L......p..?......j.....V...?.......
<<< skipped >>>
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEcaE/6VYJXK HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 14:10:02 GMT
Expires: Sat, 14 Jan 2017 14:10:02 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 278787
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070855Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..G....`......20170110070855Z....20170117070855Z0...*.H...............s.....QO...CH..k..G...y.....@5..I....Z..JEU1wr.f.(M9...vh..4zn.. (!i.X....|wS.|g..qm%.` {......9<.5<H].{L....,...n.....Dq..9...'...&.....T...$M.S.....ND.x.|i>G.^....V.W.[.9*.9.......S........f....FD.DgEl......j.G..........GN-h.F...J.`V........$.U....<e(.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 14:10:02 GMT..Expires: Sat, 14 Jan 2017 14:10:02 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 278787..0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070855Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..G....`......20170110070855Z....20170117070855Z0...*.H...............s.....QO...CH..k..G...y.....@5..I....Z..JEU1wr.f.(M9...vh..4zn.. (!i.X....|wS.|g..qm%.` {......9<.5<H].{L....,...n.....Dq..9...'...&.....T...$M.S.....ND.x.|i>G.^....V.W.[.9*.9.......S........f....FD.DgEl......j.G..........GN-h.F...J.`V........$.U....<e(...
<<< skipped >>>
GET /avatar/b0d3c416d0b77963f7715cf086a6160a?s=60&d=monsterid&r=g HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: 2.gravatar.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2017 19:36:14 GMT
Content-Type: image/png
Content-Length: 4648
Connection: keep-alive
Last-Modified: Sat, 20 Sep 2014 10:58:46 GMT
Link: <hXXps://VVV.gravatar.com/avatar/b0d3c416d0b77963f7715cf086a6160a?s=60&d=monsterid&r=g>; rel="canonical"
Content-Disposition: inline; filename="b0d3c416d0b77963f7715cf086a6160a.png"
Access-Control-Allow-Origin: *
X-nc: HIT arn 2
Accept-Ranges: bytes
Expires: Fri, 13 Jan 2017 19:41:14 GMT
Cache-Control: max-age=300
Source-Age: 2858527
.PNG........IHDR...<...<.....:..r....IDATh....sT.y.?..gW ...,o......c..`..$.6.n..8.L...v..d.O4.B'?t:...I2m.:mb'6v.F..c.......X.... .,Ww.=O...JW...GI:.3sfW.{.=...... ,..6n.R......-O....uI>_..P.C..U........x^. ..:...... .(.B...e..,."n.6....x^.. ..F..Gu.....2...<`.o..`.(..F0.,Q4..."...i."..9.......7x^QE...m.....]`.c."bg.....D\r.S.p....TO.E......aL.{.......|.D.*.^..S...x..`.....S].&t.x...uU..so.s/... .F|..-/.......3...................@E...._d.d.}". .AU.`T.;...9..#&...._../.... ..r...r..1.1._.0..&p..R........X..y>Qd...QT ..8.G5/..'.&. ...i.=O...W....I.;sf..7...@.......!.. 1..y&...4.N>_a..1-.G...Jgg...)J%...i.....}F...r.Z.z. .....}\.V&....Bj.Mf.Td.0<.a.=...%...E..=....y.A#...\....=).lE..@."..v.. ...9..5...;.....X.(.....B...Q....^.j.}#..A.Z.....;w....\.< 33..E.y....H].{W.......%...Cg...t.g.z..H.........K.Ccm..6...V.....w...l.Z.\....mm,.E..\.lPu.J.....*\.......".O...g....wp..Fq....3o0&T..h4.....$.GqnQM/.8:t.D.g<.....!"}8g.i...ko..u.......k...r@{.I@.....:..}.......p........Q..m&..s..Wat.....q..^>.h....@.I.......cf..R._4....].".e......K....X/....u...z...t......|\v....G...d]..T...Pj.<.>..7...SS...8-w...,. bhk......|...v^..q...%.:..$.H...1..HC..?.__............5...s1.....9.sf.......*...b.....t$I.41l.o.sp.\....v............(.V.pf..*w.q\.{.c=r..|.. Q...$.......k.P. .w.vC.... .....'......h.V...l...|.K.`..*......K4j...8.Y>.d..|.K................U5=|x..?< aX.$Z(.1f#..u.v4...e...`.B.SE ..`.......M......10.s.x....'.k...q..yg5o..G.][-.FR.]..tt.y..1..........*.........x...........O<.mm]b
<<< skipped >>>
GET /avatar/5dff6dff908a697dfcc3c0331bc44ee8?s=60&d=monsterid&r=g HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: 2.gravatar.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2017 19:36:20 GMT
Content-Type: image/png
Content-Length: 1908
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Link: <hXXps://VVV.gravatar.com/avatar/5dff6dff908a697dfcc3c0331bc44ee8?s=60&d=monsterid&r=g>; rel="canonical"
Access-Control-Allow-Origin: *
X-nc: HIT arn 1
Accept-Ranges: bytes
Expires: Fri, 13 Jan 2017 19:41:20 GMT
Cache-Control: max-age=300
Source-Age: 3303016
.PNG........IHDR...<...<.......N%...;IDATh..Z_hSW...:.w.<..D......V.I.&'.E..Vm)L..|.5t..8...i..Bp..>8:;......Qgn[.P..7.......v[...Y.....zss..^....r..........|.;...O`.a..M@..&....u...zd.....y.J....b......o.;.x..mg. .S..m.>..U~*..9......U....x.....4Voi.kW(......,..{.....`.0.....@l\.....nW....~..X.veVa..'.. .k$..i.=r.w(..9k.-..`q1..7...O..gS.....G...........se.G|........{.\jo.`..;Iz]...]..#.......W.....?....v...... ..w...{.\.fI..C.F.. ..d....bf.Lf.vg.Q.E......z.^.4.sT..H.. `...0.wdx].l.fS....,..gU(.3k.3...v5..$.4M..5..F,..P..p.y c.0\.)_.Q./..e&...K.8..7h.......A.q.'..a.....L.N..W=_..^..<.e........3*..M..,Z.E.S.....j...~v.0..oBI.<......@... ."......@.......p.."...Z.........F......<....H.B..*.1../*.Jk....mNq.j..b'`..n..l6BH.......6.s....L.t..[0...."#I.W..4.8.9^c..8.#...3Xc..g.9.q....`.....[w...7|.b..[SG..Jn=ul..2..j.......Gk..9(K.8...l"..x<...9.,.q.P{..j[..d..u:.....j...nWc.l.)..4a..._K>...`Q.T..t:...v{.[.B.v;...D"A...~a.....c... ..Z.4.-.O..3)..8....,..l...JvH.....e.......*..nWcWQ.$..(@N....-A...'w....C5...?.uiKdL..1.....>qMCkGh|].....w..Z.V..2]!.....Z.~...gI*.K.BLT....A..1o........5.aX.gy...i....TL...6....lMW.~..H.U..5P.u..[I......b.'....m. ...............c....M.]J. .....6.v`.....[......I..#o.=......P{..8....7...\.....c..).4.........P...........]Nn.....4.v`|....l.....y20..<.p....m0_?...,.M...Y....,..${.c.E.........aw...z...c.#g....no.:6..>^ -...,...C...Q!S../..fg..8A.V\.v.......3.....J.. ,.JMx......D....m.<..^&......}....-j.&A....Y.W6...y...[p..2u....<.....6.A.&.........
<<< skipped >>>
GET /avatar/11a138d4cd2c71069b982a474c6c2f1d?s=60&d=monsterid&r=g HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: 1.gravatar.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2017 19:36:14 GMT
Content-Type: image/png
Content-Length: 2925
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Link: <hXXps://VVV.gravatar.com/avatar/11a138d4cd2c71069b982a474c6c2f1d?s=60&d=monsterid&r=g>; rel="canonical"
Access-Control-Allow-Origin: *
X-nc: HIT arn 4
Accept-Ranges: bytes
Expires: Fri, 13 Jan 2017 19:41:14 GMT
Cache-Control: max-age=300
Source-Age: 773907
.PNG........IHDR...<...<.......N%...4IDATh....P.e.....#?.B.2.....v..ViF........-.3.....S.bGo.(E(.F....z.z...a:......zW.ns...?.K...M...0`H.P....e.I.B..;.#......'.......'.=.......$.....]_>.....V.o.....7.b8.$V.F........?..9.kK.\...........`....X1..I.dCm.....C....$.e..........$...L....Qr...s.C...b.....y2.r...s..h<.J..\.g.<^..P....!..\.B.V%?....o.bN&..F..........wh..x04:9.>3C.J.o.E.P)...x..I...~N.!..!~~..x0.%7k"t....2..U.fKn....3........^.4&.B4.33..Z..........x0...I..z|C;.y&L......l......".....&...O......... W.F.....5....$.......e.7;......s...=Z.x0tq..&.....rt.._....`.}...K.?......m9.P.......V...Z...g.D..J.[r...f...[...b..].Z...&...;c..O..K.]....$....DY.Z.....&L... ....|.[....=.!.j...!bx.$UQX.kkQ..4...?XQX,.A...........a.....1..hR.@.0.('BWTJ9...`H.Z......[X..C.$u..`....8.w.,..=.r...M....Go>i~....;x.V.Rr.,.Op>n.......jU2.....Z..~.....&5.&)..Mx{7..MR...h4.........3.....B.~.kG. ..........CQ.....D.......>=...A.8..{....{...|.A.24.W..V.|z....|..2NXm.}........h%[......F.....tS......6.H..&B.D...^..K..)9..L?..(C..;.......$u..........&)..0.]....f...t..h5...E..._.mC...=.K.C.R..d.j..#.......WYYy....hEaq.......h..h......^..l.=.......L.S...N.j ))ill..g..`.....4....&sm4bn...OEu..A...K...~..L..zD.M..S...,..n...."{6{h4...o..MXm......8..r]{..}...............*..MF.../..u....H..L.z....N'.?.h.....n.t4.V[s.../...z...t.\...d...(((...........H$......."......$4Iy.^.Z}..&.....lll|...a........YD<...a"c.....$B...^..Z!rys.i.........t.....^y..O...-...;.i...]..T.*./...J-"h..e2..../......]..M...f.F......i5... i9.Q..=8
<<< skipped >>>
GET /avatar/7e5cc5fb8d2fd78d5ec9412ea4ffc50f?s=60&d=monsterid&r=g HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: 1.gravatar.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2017 19:36:20 GMT
Content-Type: image/png
Content-Length: 1873
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Link: <hXXps://VVV.gravatar.com/avatar/7e5cc5fb8d2fd78d5ec9412ea4ffc50f?s=60&d=monsterid&r=g>; rel="canonical"
Access-Control-Allow-Origin: *
X-nc: HIT arn 2
Accept-Ranges: bytes
Expires: Fri, 13 Jan 2017 19:41:20 GMT
Cache-Control: max-age=300
Source-Age: 1935565
.PNG........IHDR...<...<.......N%....IDATh....h......HsLF.O..C7..Lk........6......av.....6.........R..6$..2H...z..<F..?d....[...i...........i...M.....'A _....sz?z.........>.8..m.U..0F.XZ.\(..`l....1t.....n.......c.......x<.`j..A..}..*...`.&.......W...i..\..|....=c.......B.4k.0..\.4M.N........7o.]z:.._...J.DbX.......P.@.`.-k.H.JcYsD1"...I....$P.%. 1...`....9Xb..M.1...U.....Q.......].....".\.....8.T....4...4..K........if;..N$t ,_.u!..n&:}6 k...*=.l[...~.....FF......\3~u.....y.k.......WU.9...X,..nY......k/....)......:M]^...(..1.T..PQ:...;.[.-kN..I......5/..*..D.....\......p.w..x....S).......Z.*.m.....;.1*........:3.. .|.H..]..|.$G)....;.R..^.;.|U. ..S.*=.....199y.....Db8.].]....7......]b.....)].Jyg.. =...G\9XU.{....nYsCCC.T.%......C.....gk...?y...Zn......]....d..<....U........d.........}}.h4..ZUU"R.*..5w3.d..^k..d.4M|4.;..:&.Kyg....N..qw...2.*..f2.I...v4.....f*.e.......0B.p.4g...M..~=..q.......y&....S...2......>....m....L.Rr.7.#&..B....?.c..L#t.......O.{m8@)..%'...q.k....S.2`..n@...t.wD$....d...ff..z..=$......?..a......k..M..Jy..;O.i##...%....*...l.8A.H....]/1Q.$.i&a..p...D..L.US.....2^...R....b.~4..........R..l,.-.bq....c.X,.`....E...{:......h.d.&.5\..*.w\V...ef].GF.}6.QL.!... ..-..m..r..H#.ef@.q D.P.....[...B......m...0F.....j..M.P,.#G.d2.E.p.m....:3..n...io......Q.<....ff..\..v...........B.D..L....v.Fnhhhb.5wPr..g..{...?.W..g.....f.0F3....\e..=..Z....e....B...e......O..y.0F/_..........lc..l.......H.uoRV...d.(%.......O.g....^.u..o...!.1..a"b....^3.....w.}.....]..$.|.....B}..4.N..HUU.L...
<<< skipped >>>
GET /css?family=Roboto:300,400|Exo:700,300,400&subset=latin-ext&ver=1482346734 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: fonts.googleapis.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Jan 2017 19:36:12 GMT
Date: Fri, 13 Jan 2017 19:36:12 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
b9.................@.F.>...E..a....!.H_...../..i....e...w.8.'...Y..rS.y...FFTw..~S.c%.i....C/...d......a..U...e.N....c,.-..J*...I.....k...]n...y.k.pn w...v......)..rMW.m...u..8Z./...o........a....}d.g9.....0..HTTP/1.1 200 OK..Content-Type: text/css; charset=utf-8..Access-Control-Allow-Origin: *..Timing-Allow-Origin: *..Expires: Fri, 13 Jan 2017 19:36:12 GMT..Date: Fri, 13 Jan 2017 19:36:12 GMT..Cache-Control: private, max-age=86400..Content-Encoding: gzip..Transfer-Encoding: chunked..Server: ESF..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..b9.................@.F.>...E..a....!.H_...../..i....e...w.8.'...Y..rS.y...FFTw..~S.c%.i....C/...d......a..U...e.N....c,.-..J*...I.....k...]n...y.k.pn w...v......)..rMW.m...u..8Z./...o........a....}d.g9.....0..
GET /avatar/b0d3c416d0b77963f7715cf086a6160a?s=300&d=monsterid&r=g HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: 2.gravatar.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2017 19:36:14 GMT
Content-Type: image/png
Content-Length: 52164
Connection: keep-alive
Last-Modified: Sat, 20 Sep 2014 10:58:46 GMT
Link: <hXXps://VVV.gravatar.com/avatar/b0d3c416d0b77963f7715cf086a6160a?s=300&d=monsterid&r=g>; rel="canonical"
Content-Disposition: inline; filename="b0d3c416d0b77963f7715cf086a6160a.png"
Access-Control-Allow-Origin: *
X-nc: HIT arn 2
Accept-Ranges: bytes
Expires: Fri, 13 Jan 2017 19:41:14 GMT
Cache-Control: max-age=300
Source-Age: 2864644
.PNG........IHDR...,...,.....y}.u.. .IDATx...]..X...bs..(J..'.tu.....'......nO............c{....1..~....<J%EQ...>..r."%.9..NU..AJ&...... V.^o?......&..C.....ba0...............s.z.,.c"J@.0Q......!....\.$O._d....0."r ..."...k.. *.(.9.S...(r.HD.........sp...........%..G.zT.xn.u....K@.z...Fn..L...O@.{.......9.l......s......w}..tn...3.._....G... k.(2."...Zp..2...0....$.r.p].j...1>Z20....<.......H.0`.p......(..)....~...c. .n....9...W....@.>'.@$..Q.c...............p0..|.|?".W.....q....pN^C..w....... `..F...l@.D..4.... .,.1$.ea....."K......N@.z.. . ..Q....rYWA....kc.......u.YTt.`3.Qq.X'.Z...Gy^....'..8b.Y...Z...0 .....&.H".(.V.....h.y/f.1..$.."..%.......=...&...8.T.w.K......#. . ..s..R.".cb0.]...(&.2.%".#......yD...... e..6.]....h.(.y.r.*"..0S@.u%..Y.(y......WA.V.. ".H_.|6.5..gzp$..az..........[..P.N...1:...'fI.b0' ..$.$~y..|. f.j....F]Ld.l.G^.D...(.H.Y......y(.1`..;......k.#.{.0.O...d*...p..}.@..$.dY.d.&...=*."2]........... `..4W.a.....d.9Q...`NA......=>J^...\...6M......s..z...._Z.K...........z...X.P...*....V..$.`.g.\9..M9=..^_.....j......@.{M._9..'7.O.).Z.$1."....D.;....M.u..1)w.wBD1.(.Q.c.h.@B.R..H%.$....Q.Fd.%...Q. .S.kS9.}A......v.._.....K..; [.[..0}..Y...Z.b...P...$...D..C.&..k..8W..\....0..1.........su ..>..s .............~xi..........,G..1.W...o...QT.....$*R....".8./.[.......K'm.vR.N>-......[~.....n.........B.IU...._..}T..XU`.kT............#5M..U.,i.OO..#...;....z....?..JN8.......a:....DI..%..&.2....,=PI..E^q.z.............O....C.W.^..I....0.*..Z!.Mk}.Y. FD..OZ......T.._.=........#2&.4.K
<<< skipped >>>
GET /avatar/5f47a8220dd01fa7ff45bdb7a1caedd5?s=60&d=monsterid&r=g HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: 2.gravatar.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 13 Jan 2017 19:36:20 GMT
Content-Type: image/png
Content-Length: 2236
Connection: keep-alive
Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT
Link: <hXXps://VVV.gravatar.com/avatar/5f47a8220dd01fa7ff45bdb7a1caedd5?s=60&d=monsterid&r=g>; rel="canonical"
Access-Control-Allow-Origin: *
X-nc: HIT arn 4
Accept-Ranges: bytes
Expires: Fri, 13 Jan 2017 19:41:20 GMT
Cache-Control: max-age=300
Source-Age: 773913
.PNG........IHDR...<...<.......N%....IDATh....L........K0.Ih5.K.a..6,.cFz.....P..2OS.eY.J3Z..e..#....V]..6...faA.......sa>...%,..!.v..t.;..Y.....c..........=w.y.....w....g........X......?&T7......@.V....x..xe.q.y.6..7F..zS.1m9...K....?s..PS{(.........O..........@".Q..........E.@....~.J.... *c.z.....)HM.t..NJ[..q.....L..H.~U.M..8v........7{\..;&O...'K....\.....{|......J...7.#S.]#.]......dU,;.6....7...W......@".en.bLi^6..=s....9....'...4.4.6..L.Mw....N.0.....N.X.......L....?1h/..7/......{..~.....S>"G..y...$x5...Y..JC.U.K.....3W..1...vd.=>n....N.-v..Q.../........zo...7..../..O.;...h44..|&...G....BQ..]..M_w~l..YA"...R~......WF%.....5...Ehb.4...T2Wy.7...6.....y.i\.s....(.J..4......1..N..I.5.J...c...MK...c..'....W....2"..V..t/.._.l.=.Q.#S.....q..x..&.b....y......O...;b].........I.()S....R..N8.'...%.....*./7}..............T..R...w:8..2~..k.B.Y.9.:...H....FC..I.0..J.^.....H..Q.=.oz.,m.1..........&. h.&I.5q%...fNS.M..Eutt =..$.m..a...&L.~.x..;.@Q.r.4............)......f..EQ-....yE....ae,.....$.....p.F.....fH..h4......$Ib......8.N...V..r..1...4M.;v.3M.D@.S[..N.$...EQf....H...t..........:.....Ye<.F.......c.f..Db...aUu..3p."|>...H.E........g...w..1@r;...A...:::..TeV... ..;.h.N.?M............=P....N.Q(.B..{.............;..A..C./.Vb\.(... ........o.{......~..VSh..<me,..ka.9........ ....>..._.....O.2......6.Y*1qWeV..aB............eR.O.u.....D...........X.....V..x.....j.m~B.O.......2......H]<81...K....J..x...m44.tn.......t_h.Y...V..?..C/.QM..OW;V.{pbx.d.B......^.f~....`..w........V..]...jzX"Z&.K.i
<<< skipped >>>
GET /pagead/js/adsbygoogle.js HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: pagead2.googlesyndication.com
Connection: Keep-Alive
HTTP/1.1 200 OK
P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Content-Type: text/javascript; charset=UTF-8
ETag: 12289576273709268109
Date: Fri, 13 Jan 2017 19:31:15 GMT
Expires: Fri, 13 Jan 2017 20:31:15 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 19050
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 297
...........}iw.H..w...7...6......8..8{.,.!.Ok.l...^b.....[."............f8.{..dlZ.."...t0L..<M.2.....`...3.Mc.^...... .y.om8N.b.a..8.wV.Lg....0.r..T..Ts.l..2.q.O..l.1..M.....D.A[....A..p.Onz..O...V.F..\..1... ...R#....`c.... ....X.R..h...R..WA<.;I... .n.y...LCVfX.s.v...{...fq2....Ue.. o,.(.j*v<.<..Ea_.\.........E/....M..SZ...~....So...\...{.`~.".2O.....WW..)..l*&.>L.x.X..,..IX..t.Onj.q<.M.......U..>.-........u......N..G.-..k6N..p...1?m@.8..b...R....,....\q.qs..Tnll..W%.......n.......:.y..NJ..v...v....\X.....'..Z.f...,...6.f. .....f.@..s...LL..xr3./Mm}...0}.....P..../.?w.oG4..bD.. ..1.o..7.y.I.....6..Bh..qn........X..N.....^..n....4...........Q...X....n.....`.i8.i.......J.I.<..)....0y'.Ax>o...o..N...1..IiYf(J..J....k5...X..\L.....=x.......Yo.[...`i>.e....|._...f.W.......m....v....W.:..XT.VMtL.Ec$.........f.v.r....Ca..f.`.-..ex[.&...F..4,v..[....v!..2;{..kZl*.@`..&.d..x...u...M...N..w.......(....41...a.Y....87C)~.....f...X..._@oh!........r).D....._..J&..BZS6......?{.o.<.... :&G...Qg...(...Z...qp...J[.v.'.oE.W.._....0. ..7>".7Bo7Mu..a..@..aml.......... .h.r.....0w4..|...=f.We~h<,g.....&.u?\..#f....U...../.8..M..gg......)}......~.........~...).b....>...qph<.m..O...Fm..w8y.w.>]...3..1}..3...?..9......./.I..~.n<.....?........[}H..!.e..8p;.-[.....\..U.YM!iae.......?{..9.I.2. ..W@q>.....%A..b.-..9...S.)V.S......,.a1M...2..@...H.~j.i...y...|'.<...R.....y,..=.2....r.G.j..j.*............G....q.a.}.G..<..{<.M.!......h..*.... "<...Rb....~.d.M..p..1.......8AE.
<<< skipped >>>
GET /pagead/js/r20170109/r20170110/show_ads_impl.js HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: pagead2.googlesyndication.com
Connection: Keep-Alive
HTTP/1.1 200 OK
P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Content-Type: text/javascript; charset=UTF-8
ETag: 13370306465128178281
Date: Fri, 13 Jan 2017 19:36:19 GMT
Expires: Fri, 13 Jan 2017 19:36:19 GMT
Cache-Control: private, max-age=1209600
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 69554
X-XSS-Protection: 1; mode=block
...........}yW.....|....t....!I7.?BH .K.Y...^m...Kb...$UUw.b&...;.....}S.$..2....v....3...,...~8......`.........vg.|.&E..{.Ng........ ...,.s0...o...d..LM.fX....y......`.. ~-...3...M.s=d...Q......&....z. ......kow..iY.UIS|nzV....\..F..B6E.^,X.....`qvt...w....8...&S>.C.......?6......Zhgk..{..~...U.t"..z..?5\.. .y..jG...v.c~o.f......9.Jd.U..v|W..F..t.m......3.k>...-......... ...Z.}sV.|...6...Y....PcJf....0.........~.,.z:......>T.............Vqr.......[.,...P....Cj..E....2v0.<..`W.L...^.....E-...J.....ms.\.N. R.. ..4%@..]Z...vS...`L..`we.....u.z.gH...C.*;O4.8.......^.n.Y%.....G....k.l...1!....W,..Y...=........h.5w.rr.D...v..='..ro."...hUC:b..Iy......[...,H..2.c ..X..-..fd.v.3.......S.....,KL..i. .......it.....6|....Z..]..\.....t.?.5.X6.......^m4..K?.ttz8G}.....6...................xR.i.]/..S....H3b...S..p..g.t8v9......Y.E..:s...y`^oZ,t.NX.s'.V.."\o^.I.Ex.`..'....j.....`.rS....O...!..xk.39......;.../x.......V^...)u8.2.Q_Rl./&rm....>..M.........".._.l...~rw.....v..zY.....M...K......j..m.qy[..e"...S.m....B....r.....i.k..........T.I.....[...i...w...^....y.W...{.._e..2.Y...l.....A6.m....%.-.......O(.Y.b..d'...6D.o.....#..B.....]/SS..N|_.)4....t.....Ld.)...qRX..x.5..g. ...W$n.q..xZo....v......a.`...C!.......[.y...@|T~y......>C...%.\.....p..B.Ljq-......awk.pj......#.C.fMT1.........c..^...[.R....ilG...a..`.(.8.8..Df..5.n.gS.w.....%.. :.,.>.y&I....9@,Q....d.UL?.L...<...,.=..cT...k..6...5.f...O....D.&...EgN..~.lr)...vi.8..ph..\\N..x..:O..m...u...p&L.g!.T.?x.X...cXI.G..M..3..3Q...s6.D~...6..q.)..Qb..`
<<< skipped >>>
GET /oyun/farming-simulator-17-hayvancilik.html HTTP/1.1
Accept: */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
HTTP/1.1 200 OK
X-Powered-By: PHP/5.4.40
Content-Type: text/html; charset=UTF-8
X-Pingback: hXXp://teknogezgini.net/xmlrpc.php
Set-Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; expires=Sat, 14-Jan-2017 19:35:55 GMT; path=/
Link: <hXXp://teknogezgini.net/wp-json/>; rel="hXXps://api.w.org/"
Link: <hXXp://teknogezgini.net/?p=693>; rel=shortlink
Set-Cookie: PHPSESSID=a06b33c6a7af7b98654cfe39618ff920; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Cneonction: close
2000.............}[o.G......H.a......l..t...[.....e4....K}...j.M.....`..,...28o..y..H.#.K....UY}a_..5;.e..Y.......q9......o^>..h88....{......{&..;9...=...83.,.-.......1.G..L.X._e.8p;..q..6PS4n..~w....Q..X.4s"..}......eQ.fc...........~s..Q...4t.....l...A.F..?.>..2...=t.3g.{>..(#..(rG(y.9Q..q...k.MV.\....Cy.....<{`.m{...s......p2L.eD~..axf.<...\.h.\8...?>8x\..V.O..<zV...=zT9|.......7w.?t0...{...... ^......(..g.......4x.S_|..Zn.....w...i..E.E.._..yC..u....D.s.7..F....b<.t..8......x.C...J...0.....#...l..]?/0.w.8Hl;n..<4...n.../..}./.v....~{..... ~.A..v.........,U...7..B.&";.z..q.?....O....h..~tG^..\.NF../?F....zC..2......3b.....xng....~..0Gb....3.-.w.......f...d.......QV..8.....OC[..;\g.=... ......GW...h..Q....E..C.$Rm....O...M}.,..C..7.F}....L...#....=....b.....]..d..Fn.'...8V..U.[...7..9..D..h..?v.h.<g..,3...MbK.KG..Y..".M_/)M3..z...9....hJ_..I......F.xR......AP.@|;..xY.....Y....p0..7.I....J..q....\.n.-..33...r.tee..5jR.o./xfoP.....W....i&.Z`.<....$.....q....bY..YSEz ..s.0.EoP~)3.....B.Z:WR.x..xa.u.X...E..U,X..i..(....o..F.p%.C.......U...K.j.Q(_Q.d.....%PmP......e\.|l)........y.@.X...b..M... %@YJ....c./^B......g(V....P .....I..b.!...B...F....h8...`.....E(...a.$..u...t....a.&.sbv....G..u....m...../....|...0.......^HK.}&.U_.....tg.g..Hl.Y..$=.g..x...XN>...^.p..?.....O.._'..-<..*1... p.aq'n....L..C....E......I\l........y.].".....o.3[>..`oz.....<.<..C.i..(.&5....L...?@.l.n!l.... .|.........}..._.K.R..:_/].K...l.M...x..Mx...:|....3Y...>....L......?...e`gw7..X^.Q{0..}.
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/social-share/font-awesome/css/font-awesome-extended.min.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:26:12 GMT
Content-Type: text/css
Content-Length: 316
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........R.N.0....=lEK...D.......N.5....V..;)m..&.[b..|..J.....4....W9.D.y....E.........j.'........o...Hu.F$:#h1......a......./Y".#;q.k...............lt.O..7....;.* ..i:.=u...}..[.......0X...r(}l...z...:pX......N.K.nFp$FNX.o<0ie.U.....`W......C.T)[....V.C.1...}..7.t....pN..>Gl....58...B...\?.hBa..K.<.it...d......HTTP/1.1 200 OK..Cache-Control: max-age=2592000 ..Expires: Fri, 20 Jan 2017 19:35:56 GMT..Last-Modified: Sat, 22 Oct 2016 09:26:12 GMT..Content-Type: text/css..Content-Length: 316..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:35:56 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive.............R.N.0....=lEK...D.......N.5....V..;)m..&.[b..|..J.....4....W9.D.y....E.........j.'........o...Hu.F$:#h1......a......./Y".#;q.k...............lt.O..7....;.* ..i:.=u...}..[.......0X...r(}l...z...:pX......N.K.nFp$FNX.o<0ie.U.....`W......C.T)[....V.C.1...}..7.t....pN..>Gl....58...B...\?.hBa..K.<.it...d..........
GET /wp-content/themes/goodnews/lib/modules/login-register/assets/styles.min.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:56 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:59 GMT
Content-Type: text/css
Content-Length: 949
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:56 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........W.j.<.}.C.lP..].Uf.1......%'Ze.Hr....we..\7[..Shd...{t\(..6..7........d....2.."..i.t..JZ.%.. ......d...............&.Y(....w.nbX.57...(..%]........x...dx.jv......Y...=.0..,/I. .t....z..DJ\6.......!.l....F=3}}FA....l8..`.......8.J..Y.I..E$....j. .....$...R<q.ZM... .6Z5L[.QT.<...3v.3........<p.j.2.........9}5.n...j..J.-..\.U .>$.Z.gQ..6....i.'vE1.....n..... ..Z.VR|UUU...a........4...P.....s..p.`...iH...h...!....:.....i.....Yi......`.@_....B.R.!Tmq.....^..mv...z..a.w.....~}t.....I!..D...6@..A...`.Q\B.s...,.....K.!.H-#.R^.5._...#.....=....R...@p.............k%..X...w...................m.mKb..1.a.\=>>...Cg"..2.....-h.y...(.!.,..p..AR).y..........~p....`.!~C.h].Z.<.>.......>?....6.z........F.......W-......B/;....,Ytt.L[....m/.......0.9<.....>...V.....(........<*At.B.v."..Q..Ht.w....<.$R......x:...t....'.{9..{`....}...j.. d.f../O.....<..0.7.A.A8.....8.. .....D.!...Kb..B..w@-O)'..d..@...5...).-..I..5|..d.?B^....Q?.......y...U...........
GET /wp-content/uploads/goodnews/style.min-2.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Fri, 28 Oct 2016 22:01:46 GMT
Content-Type: text/css
Content-Length: 30517
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
.............n.I. . \7.m....z.2.>..{v/....fg..;..Q"K......e........|...l...c.T.........,............8...a.\..........".5ns5......._.77.YP.X...lq5[.6u.... ...v..KU.o....f..Nuo'x.. |}..L.c..jU....%.2...................v..U.X..w.fv...W..p9.^.&.e...^.>*.Gg......99;...\..V..>....1.4...L_..... W.x.s9=.e*.......9.....M.y.......M......D.$T.I.l.:..Y......pR....-.....?.0y.zM.......}.....F~.*t.m.....Jw.`.Wic.k.\..g...^......,o/..u.R..8.w...........]5.m..G...g....}. .......m.-d....0...LA~...Qa&...Ts.M.!...)(x.I75G.3....H!U{s.. lb.`\K.qP..._s.%O ..T....L..j{yY..G.....'-.p...;gJ.T-U1.:.<..`.$cz...If.y..Q.....2....wT..NO..W...!....n... >.ry..4..l....Rq..g.b\.P.....Y.T.iw........F.nA....M.....F. ..KT.G.D...-...db.j..zv...zA..}..KFE...0d8....{..?...T[-7n........b6]..IAe......#pU;l-.q.c.9C.Z.*Lg.....2K.....".....%...)..vG..k...2;...6.......%U..6.Y.n...V1B.t.m.i..Q.:"-.d..v...... @jq.......U.....l~.o.B...6.1. ...g..4.i..[;n..R{.^8a4..sBI......X.....2........c.\.....)..8J....W........Un.V(>.........!.to.x.>[@Hr.HV.a..V.sHw..<5..@Dwo.......dG...4...$.i!...i.`~....T.....#.}K.~.[....n..E.....|....}....y..>..v.~.....>p..6'..;.d1.!..@.jKL).dqf. u.%... &.-S.].........?...B.............O.C[H..D...}l..n.....1..;.xJn4G. .e.....h(d.......s.d...4..._.....'.u.g..!...w4.....0...*....[bI.......{YKC.4[.SdJ.h...1.....xa.....'l@_#s.h(..*lbE.1G,.T..3PN.a..WQd....6hI.....Q.gZ"..J/!......w.>#..........|g.xo!..&mB..AZH....6.B...EHa.....&K./........(.#.F/...W...K.U....c.4.....*.@..{K..>I. ..&.D.A.......X1..."..RNPqa.
<<< skipped >>>
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Fri, 14 Oct 2016 12:09:48 GMT
Content-Type: application/javascript
Content-Length: 4303
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Zms....._.!.u0...v..i.# ._..N.6.....8.. ..@.D`.{......'.v.c..........8zz.\.....s.&...ss...?v..E.}vV..X.i.;"...^.......p].e....I._..(K#.W.y:.....".e..A}...........Z..Lk.....y|..#Z.....{..N...nD..A.C....d1..M........Y.y.'..ZWK.... .oqw08hg.M..........N>..;.....>."..._o...y.V?../.|.=......Q.kS./..,.{....JY....)...;K.y...i..E..1.&...l..Y.....2c.......Tx..~ 6.o..:Z..{..._..=/. ...C....sd..e.3.\.*...a.<l&..k.`6.........d.r......I...Y....V>...u..s..K.....#. 7....wn..8..-...Q.A....i.|....~.0b.31m....]?.yR/...w......^.....E...k.*.:/b. ....>..FH...g....:-.*.f..2s...>K....}...*.E..7./..d.]..` ..Y.......^..U...l.....-...4.}....Y....O.L.OF..W...........r..(.......7.'#~......F....2q...>..h). .7.~..j...l......e..2o..X5...NW.l.pySJ..yv..g..s....Gf.N. ]r..]..l".C.Y.,wy.4..s.....2..R"....i4.... ............,OE%... ...q.....c....4.../=....>yg.P....U.x.......eU......D`9.X.iu.b,....86.,.0....K.MN..Y..`.....o....._............K.'.A.p.I.... r,..v...~@..~..u...7..P...\sv9...........a..B.k....W.. 4..-....Q..a..!r.....DKd..;....$m...V..T.A.....O.............b..h....Ky].HZF)7..Z...n.#..\.....8..G...Z.X.wT...6..w.j..u.Cwx9t.=.X...5.4.....Z..: k..B.~..V)...G.......C@.....8-rgr......f..j' '.../V........L.pV...gp`..n."b`..lTa.6....p....Vv....f!...y..c.9.n.....\.?...&..~...~.F..j7A.....Q......Z.yZ...i....N..|...[^......F|...f.....n.C.<6.w.....4.p...W......n^.G...}3.....O..X.........[...[.y2..0......./m.!h....'..$.$.{..4.D..j.$.....`6.r...hOfG..V......}...5N.......@.\......u.>|vH..jX.......I.o...v..S.L@
<<< skipped >>>
GET /wp-content/plugins/js_composer_5.0.1/assets/css/vc_lte_ie9.min.css HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Wed, 21 Dec 2016 16:50:26 GMT
Content-Type: text/css
Content-Length: 471
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
GET /wp-includes/js/wp-emoji-release.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:57 GMT
Last-Modified: Thu, 08 Dec 2016 17:13:47 GMT
Content-Type: application/javascript
Content-Length: 4708
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:57 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Z{o.H...?..=.$LS.)......{..d2H..w...d?d9zE..d,}..U5I..... ...]....".......R.....d<...T.....?...~.M.3.~.......J.z&..|f;..z..V.r,r...?H..y\.|.....XO.,..R...........m.>..O..ZLR...{W[#...J.....L...yY.Rn....(.j[..y...*.../mbC...I....D.- w.ho.f...ttrr..D..n]..o..../..&I..2o.^....v....|.r..m...t...F.......v....`.v..gR}{...y...8_.......v....dA.#......gw.N..;w...w......[.]'y...xb.......=..)tt.LG. .q...f}.~N.Y..J'k.N..t.,!^%...p..=K&..w..L[.....j&/I.vj..V.1..2..q.....u.$.^8@9;^.t. .[..I.....0.<...z8x;MG..{..Z..K, z.[..<..f.\.....4.(..t:Y)......KV6....$G....v.w...?.~[..j...GN....Q..k>.0x8....h...#.,.9.{b..Vd..T....$O.D.R$ ........v..4.R..q!..d..k.......~ p....H..).zy..f`>..}j.#...Z11.SyP.z..I.... ....TS..`Oa.c.q.X....AuX.X..u..Erd...G...Bo4H....=B{t@"CgL.. .j.9F...*...V].U.......X.[.....t ....p5.........7.g..pN.k^[.HG......./7...'..F.Y.vKa...@..z....$9\.\..g....:N.....R?Yb.O....0..z........rO..^/........I...........^........?.;~..2..n..q..!.ZV..uX..m6v.<..{.m..~...P;@W[X9..F..S<.mR.%..r8....KQb.dC.=....&. x.9.l6..$......D..fs..CC4M..[.o...4]=......G.E.n't..0w......'.^bv'.........P..L.3.....VAhY_..B...mXF.....d..}>...._.e.q$G.ty._r.....q..b..D....V'l9.^.l.my...8^>/........Y..VK.J..38S....e..4X....3.&e........(.....a{........O..r.R..-p0.R.8...VM..g=...."....r>%~........wO.m....q......t[...R.e|.ix:....u...'n.....)s8."h>Z-kh.........'9u_Sw..#..=.`..../.9&..2i....P..OD......gC..4.uF.Z......|_.|..z........ .=.~.z.z.&T.%...p.v..b..*.V..YEQF.".he.sK}........I.`,B.X.$.1}z........w.9..
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/login-register/assets/register.min.css?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:58 GMT
Content-Type: text/css
Content-Length: 276
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
GET /wp-content/themes/goodnews/lib/widgets/advanced-news/assets/widget.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sat, 22 Oct 2016 09:25:16 GMT
Content-Type: application/javascript
Content-Length: 2625
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Y[o.... 6.0...I......v.4.n....-.L.H...L....u......([......,....~../.....y..b.?Dx..t)..... ...Q.b..yR...a\....E..-s..p..(...{...z%...g2.Z.a.cQ.],K...p4...........j).;...V.4..Y......Z..B."........B../.........J.5x...h......f.(.8...^....s.....At.iQY........(../Z$.2..a....X.)..b...P^....D..a^.....X.R..:.d<..........w.U....2b.`.s...?....7....*...Y).T.eO..<=.f.y<O_.3<].?.\...7........ ..&OQH..W....`X..........k...r..J.b!.H.t.w../.=R......g'..\.j..S....\%.....' A.RI...f6|).7..FF...a.".{^.2.....;../..L\..z].C."........<s.B@.....i.....>y....... ...;......._..?..ak.....e:..c.4.X-)F ..> Z7....$.>.z..r%....;.M...-#.....m*........V^.......0.u.V.vs.-...k^ d<..?...4.y*.>.-..`.......N..@.0.....p.Iu.g%.h.sR...q.J.y ...D:5..J..=n.,/..Y.....X4.gUh.j..>\...re....w...W..8...@|M...Z..rzM.I.48../h.2Ej./eR.....n..kK,-.......F9.FLgI&.{.5....."..q.[..U...TlU.-..i.../.......n...h..OO.......x.A..-:'zZ3v......0`...%.36&s5.c......l.....%9=... ..<.3.8.j.Wo.g..^.^.u.....(.iw8..g....q.Q#...2..o.,6...a.t...r..l..:f.Ff#....##....?..@..$xf..9.r......7.....C{...>Z.... ...~.....*Es...u..m..'fm..nD...6.......J.,f..T..[.o..p.u..K..i...I..JO...F.......!...~...}6.Z..z.Bb.Z4....,1^..]l..A.7.[.6...M...}NN.o.7Zw..JQ.3...I.@.%...[...-...J.P....-.........0fN..M...}'.....s.A.L.&6y|..O.q..QJJ..|..v]u4B...5..^.=...............M.\)\...i@.......:]..:.}....*,.E\..Fx.L...X.r.............-....T......@.*.8P.~.k...&.....:..1)'<. N....~...........}b.8e../.....kKU.d.:..,\.G.^&L..XK5^.....\.4...>...&.2..)..8. .?.ic
<<< skipped >>>
GET /wp-content/plugins/xt-mailchimp/js/ajax.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sat, 22 Oct 2016 09:44:14 GMT
Content-Type: application/javascript
Content-Length: 1008
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........VMs.8.=._..."..q....S3............(...D.o..}...0d...r1n.............7.t...U!...~U....R.I....k0.f.!.Tq_..T....T.$.U..............-Y.H......_bI.O...nm.!.tK.V..h.M"L....X&.q..F..N.C)"._..i[!......#\e.q....e...7..i....|..l`..m..1.........0...dQ..)..0..p...E........e..j...U...:.....6..!.....!.s.....0...o......$...y.pH..#.{[.........a......E.U........R.|...Nl.F.....>._&..x.1......L.>sd.s.%...).#...M...1../....lf...D.....t..V8...2Q.V..3%.....#.i.w.N.O...0.v?.=.&.g.7g.10...}.G.C.]....f....o...q....IUV...f.......X...x...|..g.?.....s&.{.H. ..m....V o.f.........n.2..I.:~.......~..^.j.V...A.4D_/...9.v.1...L..Q)....1...A....B.4.. ....3. ....0..I.".Gq...#..i..o.y.#..........@.[..... ..a.. y. ..;.Ce.z.k.s.=L.9.c/.H...M.....(x..U... t.9}...'..4........P.......r.. ..%..\.....[w.m...?..,.)E...w...v>x....XI.^..i^.....4f2.'.....q...NJ.h.C.....g1.Dz...D..G...t<..3#.2x.PU.1~..T.h..gM~0.Ei.... x.\.'...z..x...(..3....4....H..h.>....p..o.N;.n..m..v.if>...%c..U.>1G(..?.e..2U...........&j.7GJ..........0(a....HTTP/1.1 200 OK..Cache-Control: max-age=2592000 ..Expires: Fri, 20 Jan 2017 19:35:58 GMT..Last-Modified: Sat, 22 Oct 2016 09:44:14 GMT..Content-Type: application/javascript..Content-Length: 1008..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:35:58 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive.............VMs.8.=._..."..q....S3............(...D.o..}...0d...r1n.............7.t...U!...~U....R.I....k0.f.!.Tq_..T....T.$.U..............-
<<< skipped >>>
GET /wp-content/uploads/2016/10/Farming-Simulator-17-Hayvancılık-Rehberi-273x182.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Sun, 30 Oct 2016 21:12:01 GMT
Content-Type: image/jpeg
Content-Length: 15029
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...W.qJ....B..N.G=i|.W...71..w....O.h..G ...g.).)........][.sK.......qJ.{..m.8#.sUu=V-.......(#$.N.J.|..&....r.'.c.&.nPE#.#......z....Ws..3.....*3\......sLf.73.=I.........#...-]...H$.2........5N.D......$...LAK....P..Ks.^Z..[......J.....p.....;X........o....y..}..@B6p23..uR)F.cs~.j.v..,......~....v...`S...=......5 ...\yD.|.a.$......]..i...(y0z.|...C...*g.4.'X.~..._P..........WV.[..~.cQl...2.......O..........]..K....b.#.....N[.N)H.;......;].;.jO#.O...J...N.W...%..*{.G_. jua7d...-.X......]V.... ks.......w...j..9.[x.....~G.....n..R...&.t..8.Lj........tm>.......}...n....n.kY.b.2..p......f...r...w.4..6....e......|.c.....EI..]..x....g........G.Z....a{.tG]N.....{.).....m....v....z...a.. ...'.{.-.l*....$.'.Y.3..........7V.....(T........}...Kj.1.......k.Z..5.IeYDy9.5.......U....qT.*5.......~....|^.P~.O....*..Tf...yZlC.<..~B....U.V..O...mL.B7.Kz.
<<< skipped >>>
GET /wp-content/uploads/2016/07/wp-1469792536870-273x182.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:58 GMT
Last-Modified: Fri, 28 Oct 2016 20:09:41 GMT
Content-Type: image/jpeg
Content-Length: 13782
Date: Fri, 13 Jan 2017 19:35:58 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.........i.......J.'.....I..idr).K~..E..`.K.u.G.a.Q..g.....H. ..".p([!..Q.X{...k.1M..*. ]X.\.......e{..-....i.`.........e..)....XX...X..k...$d)...o..N.J.9....H.\WE....M(.....P..0V..T.......uSG.c.p.:..4.Ao.1O....t.............. ....;V..}...=*y.TJK.lT..:U..9.k.^.*h.....G....H..`~...cXG]MU..S.3...............@G.Jx...h-.)..r..bQHjO'..".)\t..5.*.H.J"...I.B..............;GZc..E.. X...F)..).......R..Q.;.&...vP..........I.......GJWCQ.K....AQ....NH.v8.tZD.rj\.Q...*N}.E....O5b8..U.H......hEn...r.0.TVl2..Z..dpk9\.D..dn>.?......m. ...{.xc....*..z.#m....`.y ..O...j.V.-..o..B.\I ].:.OSS8.[.........!c.@.OAP.b..2...=.Z..1...7....'.o.......c..s^Mu.)......n;wI.?:j....Z c...."%........W5..i....8D..Y.......SD.4....uW......|*-t.m,-...o0.9..3..5F]JX.......D#"..]..........iI.?....A.m.s..x.&...3..2.$......F....y.....rk..e.0.*Oc...=:F.]..g..?.c.........K....nb...
<<< skipped >>>
GET /wp-content/uploads/2016/07/wp-1469511914476-273x182.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:35:59 GMT
Last-Modified: Fri, 28 Oct 2016 20:09:41 GMT
Content-Type: image/jpeg
Content-Length: 19202
Date: Fri, 13 Jan 2017 19:35:59 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($ !$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...4....}.A..z.9lSX..H .....H..R..R... ......J....q.........%...V.....[oj.[{V..{T.i.E.c)m}........."..JW......-=.dY{T.....c.Z{S"."yW.p......[.....x.a.....?.)\v2...8Z{V..=../.' ..-G.8[{V...........Zh.].Z[.i..{b..R..,../......b.ojp.....^..{.[.0..5)5 H.......T..T.N. ...l..........P.$..[...Z\.*.-}......Q.-$..5.8d...eS.N..&......e.1.>r...=}h...-.....<A.6v.....l}.G..A.i.k.R...q....;..<.....4..a....-........<-......F...Cr...2cp.e.....Z............[)...~s...<..is. ...l=(mb.b{...{X..k.-%.......s..3......qrmL.....6]ZK.e.27.....b.D....[{V..@.......o.N.....jQo.P.;...f.....E.a..A..H.....T..v...*,.2[...zT....a.....a-...p{U.....;.....K_j..!...tS}..B..9l1...^9.Z.. ..s.".Z.T.j1..$.= ...~../$..RW...<.D....0..K.,i...L....j_..r.....;v3B....YO.\...7.W.SH....g/=.H....?..x.P......jO...#.E.;S...y..%?..#.um..........Z..]Z.L.]O^.....[w..a.2>]..ww
<<< skipped >>>
GET /wp-content/themes/goodnews/assets/vendors/fontawesome/fonts/fontawesome-webfont.eot?v=4.4.0 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Last-Modified: Sat, 22 Oct 2016 09:23:21 GMT
Content-Type: application/vnd.ms-fontobject
Content-Length: 68875
Date: Fri, 13 Jan 2017 19:35:59 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
....%.............................LP.........................^ >....................F.o.n.t.A.w.e.s.o.m.e.....R.e.g.u.l.a.r...$.V.e.r.s.i.o.n. .4...4...0. .2.0.1.5...&.F.o.n.t.A.w.e.s.o.m.e. .R.e.g.u.l.a.r.....BSGP.........................!..........Y.D.M.F..x...>..........)Y......h..D....pj.....K......*....0....~.71.^..{.. rAP..u;..3..K..?]..:..y..f..`..o........&.d:..e.DgK...R..%......q..H...:........<Bt....]....Nbf..JH.%.....~..S...G....8.I.a.U.-&..q..1.....#`U.....W.L.g.E. q...y..:..g$8..eAV....3.e....u.j...z..i.@.......a.=%..0..O.\O... "3..ef.0c..@....$.....*...qD..E.".(./.Jv.......,^&N?.'c....-.1f*.}..............)..k\eL...e......86Qp...f.vX...*X..C.;Ve..P CKW.a.Z...d....?.pK.U.<T......l......RT........$*.Q........YE............e....OI.....!..........FE].CE..r>.s..d.W.....*0#....Q.T.......:...b....#...@Ym....{..D.t.......!..Z.....d.......S..........Qv'...x...U.L.89......96.....,.Be.....r.R... 5.....XW......N..J.._;.J......%.$...-n.pr..t.......pL...V...{..@....L....."7.....B...|.......7J...c*...e...K..d...=..x.......|4.!.d...(.A...`_o...s..[.0H^..L.pa..)1P...8S.A..s6LD....o...K..$.SD..RIU..W.,. u@:.5W.......NFG.g.i<.Y.F..P`1%..R...Ib..>.....s..g1{.L.B..#..}aD0.`.C*..............'../a9.....H}...d...#."...4.z.@c1....5n..@.r...6.7..&...Z..X.06...Ma]..b*....6.....Ql..|.....]..x<..E..D0f'.B.._.....'.h...A.3...w...7...@o|.../J.[.s......e......../.".RB.mB.....k>&l@.r....,...4.lg.....:eQ.......Z...<#...(t....8..PaL,n.r'....n.p8...`:.*.C.(......H2....V.f......S......9..jK;..'".zJ..zY.=
<<< skipped >>>
GET /wp-content/uploads/2016/07/wp-1469155132742-165x110.jpg HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:04 GMT
Last-Modified: Sat, 22 Oct 2016 10:13:18 GMT
Content-Type: image/jpeg
Content-Length: 4506
Date: Fri, 13 Jan 2017 19:36:04 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................n...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......c0.....<...i.t.<.Z.g..j&'.44...^h/.\..l..8.*.m..i...............Q@$C&}j.0.y54..x...".....rI8.......c.S.......x.@...j..}....*.o.......j...y...1Y.Hms.a1.s*r..7.8.8...j...c... ...w.E|~F.s.Z..4..........pjvl....#....X..{..'".IUg8\.h$..:..TN9..3..i...@'b.......S/.......x=sK..z.;....p.x..V..~...R..........*E....t....c9.....r -n...;.C.h.u....^IB.I..I5\.g.......RK8%.......}>..^.h..G..eu.lB.Ez......X4....n&..[..O_...'._.u.Q..W.H.....@8...x..Q...6.,.p.Ab~.W..h5.:.H5.x.....6.FE|.l]J....S.8,.$....d....S..H..........$?.G}(;..............!6......J.6..my.\,..R.*......Ez...j.[G.;mo.&.]....=Cw..:...|..O.eK}$,J....V.v>.6.0...h.~.xW.zW....4........>.;..c.......u_......T..X..$L....8.....m;........R.<d..q.O.........f..`j[tnH.<.i.MY.dc..Z>..S.{..s....N.....E.i.V ......T.OZ).....^.?...8.W05<.MN...;..%.:...H....W8...jAzO|.. :E..>
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/likes/js/xt_likes.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:50 GMT
Content-Type: application/javascript
Content-Length: 405
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........T.n.0... ...R k.:v...j.n..#.P....E.{..NH....x.........o.j...V.|...dN...C....G..|y~..hG...L...h=.S)v........\.E.hV.lC.".....& g.....pmeKZe..X..z...c.R[...*....3&D..(.Z..$$........K]I...............(....J.f......6.u:....d.,S..i......r.}Z.(.W.<R.2WK.....o..OA.`..p8|.:.k{C...w....{.."....z".V.0..5U.$....qP-.R...H.5...~.....u..Px.P....M.X....3.e...........o#.B.L].!..n.I...9....3=9....1:~._{.T....HTTP/1.1 200 OK..Cache-Control: max-age=2592000 ..Expires: Fri, 20 Jan 2017 19:36:06 GMT..Last-Modified: Sat, 22 Oct 2016 09:24:50 GMT..Content-Type: application/javascript..Content-Length: 405..Content-Encoding: gzip..Vary: Accept-Encoding,Accept-Encoding..Date: Fri, 13 Jan 2017 19:36:06 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive.............T.n.0... ...R k.:v...j.n..#.P....E.{..NH....x.........o.j...V.|...dN...C....G..|y~..hG...L...h=.S)v........\.E.hV.lC.".....& g.....pmeKZe..X..z...c.R[...*....3&D..(.Z..$$........K]I...............(....J.f......6.u:....d.,S..i......r.}Z.(.W.<R.2WK.....o..OA.`..p8|.:.k{C...w....{.."....z".V.0..5U.$....qP-.R...H.5...~.....u..Px.P....M.X....3.e...........o#.B.L].!..n.I...9....3=9....1:~._{.T........
<<< skipped >>>
GET /wp-includes/js/jquery/ui/button.min.js?ver=1.11.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Fri, 14 Oct 2016 12:10:13 GMT
Content-Type: application/javascript
Content-Length: 2334
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Y[o.F.}....A&kzT..D...4..a...}r.`H.$&..%.n.I.}..H.DI....X..w...4.....[...:..z.}..wBT..@...?..F.:....W..r.V[,...U........Yue.D.....Jlx..U).<.D..../..........._..."Oy.rz..V.znv.c#..s:.k.&.}.S.onV].JQ|....B.X...Zy._.%..._...R....&JBB.i.p...<[sA.C.D......%,....K.4&]~.E..I_..Z.......B..x..{V.$.F..s......U..........}zt._...|.......r0.&v%[...W.h.3_l.6X.\<.[^ubP?.%...|...H@..>i..........W..DSO...l.a....-.`..s.h....Kg3?.S...`)....uH~....8.-...F.'I(.%w...}~.......3..#....V..'?Vi....$.....Z..i.%.!... '...>...O...oZ.bDt^..:.>.\...;m..IX.2j.h..-K..EeW..t\t.]X...zIEI.3N.k.W...!..6.a....$G.J.4-....'...XW&..p...N.}...`...... 'B..$.*$zInl.)RF;j.[N..7..V...j..;.....n8I2...3.wn...U.xDp.fo...\..r..1..L..'B. .B.z.KN.Z..F.p..t...I.'....!......b...%!.,..<0...N.........~.)&yYw...............-v.96.BS...m..Fes.....C...O.c..~F...d....V]..6....p...>..{iQ...f..............ME.9f.E..0.V ....:_..D...........G...-F[Q...[.......l..$.p..@...Pu..L=c.....,.I.5W..U=..i6...\.........P.U...b.y0..........R.......C.M...........37.L..&g.....B.....$.3j...w..........e.i....:<|b.J....i?..b3.H.. Z..SN..qZg..W."..............]U_.<.2..FL...D...&..NbY*...j.S.J.........{v_......s...P..Pe.&...l0_..?....lvv..O.........q0.h.1...d..j6...yt.u.W.......wOI6.:.. ..0e. .*....b...o..F.!."..S.......Na.q9.=..@...BJ.4..}.8SW..=.2........K. .........Q.Q....J...I$....*=.b..X..@ .....(,...(..c.......s........L....k...!......3O..\C.....9F.._a..pbp.......[.^.x.m.,..=KS.sH.....c...H9........vP...4.ukw.La=G.C.;.8.uE...O...*.Z.T....j....(...
<<< skipped >>>
GET /wp-includes/js/jquery/ui/resizable.min.js?ver=1.11.4 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:06 GMT
Last-Modified: Fri, 14 Oct 2016 12:10:15 GMT
Content-Type: application/javascript
Content-Length: 6150
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:06 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........\[s.F.~._!.....Aiv.a)....Sv.$....N.....$$.`...B...wn@...d /"...}N.{.h...Og....k.........Y...O...Uxu...z...j4...B..y..K4S....q.......r[..&/...H...<[.%e.Y....\W4..l..U..a,.1....?.-.$ .,<Z2,........x.....k......:.n..v....g/^.m.WY9=K.i^d......t,...O.z....r.....V.....l....?.{B?..gK.z.l.].....y ].?/.C.3.`.9[W.....{.Ly.9 6.......S.x."....^T%.W6:..."_.......Ob.U.......q..34>....*K6?.H..Sz.....-..j].yY..:O.a.#^d....* ....*[S.2...#......^....\..B;...e^H...}...2...@....&^ .jS...).Tl...r..u../6.8.....K.......vv<..}.w..,.s.q.1Y..E3i.$.....y..Y.6........y%.pJt.}9.......,....o.M74>.{.C.'5.....r..Y...3......~.....}....e....uF.^...h=l2H.,...h3..`.?...5.O.!d..6....EL.l.A..>.3........O-F9...{...=%.C^......];..Z..rM../....:..........<..........Mg...L.._..]...6,.4..^f!.&...?.....W....A.}^...}.J%.=...,..r..y....m2>..U/.y....YB....A.."..Y.y\d.W.%.3.......b..O.h.*....".p.uy>.....QXn7..%..C.Y.....a..R......N....<.?.mR.w.7A..T=?...5Z,.:.F.......I..i.y_.$.../[.L..2^..H.d...&Dk..1y...8.$.......%xT=..%.e..22..Q......P..4.`..={../.!.l}d..s.Z.l.3..!.W..NL... ..m5.i.Z.ay.l.../......4.V..q.M.er.....E.."..Zw..g,..-.r. .e....n..@...o.." f..x.s..^@....j....U...m....d......c...8..8.[<xO....4.c..d ....$u.M....}.SW..i..yP.d....!..W.*U......Cl..3iM.q....g..t.{....:y=Q.^'...Fq.],a'.[?.F-.3.......Z.6sz.g^....U.d.a........@r..^\dm...6g`.......Z.&.4.gd...........v[:.l..p._s.'.V8....WQm.'b..._O..~.....I...~vs.....u...`P[.'.|.bG".z.t..4_Wd..y...G...c.m6.."....6.M...`3.....z..{.i.P.f.'~../..PcU.....p.V.}....s...
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/login-register/assets/scripts.min.js?ver=4.7.1 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:24:59 GMT
Content-Type: application/javascript
Content-Length: 990
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........VKo.6.. ....B.....(.....v.....8..J.ARv.^......Wub.E..dr...7.....(.y...j%.........k."_vme.j.L.[....G(0[....c.V;.r.t....u...lQ....7.....~...Z ...4.....?..C&.t..=....p.Lhp9...P..r5d......=$-.&..b....d.I.kUy..Z...#.T...)7T.... ..v...............PwX...>.4.Z6d.Q...<.wm."...Z.W..o.V.2..6Y........i......ycV..2..93]U.1..4...W.......x.?...P....F..|..JG....9.L...b..x|...Uu.%...@..!.w..j....Q.a.8...g...L.O..3..Y...Wx-.f.#aN...3......../...;..&.D........\N.....ljB........i.x..Og...`.ii..;c.ku...Y...#..=......M .j,A...@..M.@z<........fi.jW6..Xaq..'.'x.u.:?.^9...Fm1RS....E...R.....N.....$.j`-.5..?~. /.tp..'...B.@.......E..s..!..F...8P.{.9.Q.T..5...=...~~5`c.vfF.f...&d.. ..oUs. r..v.....4.W.L.*i....d}.3.....)..4...G.fi......K..i.3..L..~.m.|...Y.,.OE.F...DK...z..5.!..I.|..&g6...{.;.8.$yI.}:3...'6.....Z'....O...p...g.W......F.{...........$=.z3.9A....l. .x..S....:....y.3._...B......e.wx..)...U..Q......jep./v....U.b..v.:9#O.xf....=..Z..V....-c.pT...d. {.......8.}'....!*..H(}..&Y..........
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6 HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Wed, 21 Dec 2016 18:53:04 GMT
Content-Type: application/javascript
Content-Length: 3810
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........Zms..........`L@..N...N....d..v......#.......e..>.r...)..f2&t......w....&-.`:.n..f......J...... /hnJS...Oe.............,}...~....YF.&..4m......X.Ro.......@.8.2..w...b....h.G..Oy..,.....(...UZG.............m/7i......{SLm.^Q.akA1.....<3q...%....).&.1..'P8.2...*..4..g....Eq.T....s._.Ym...Lr....T.z.|..u..i.....n.0.k..0.ws"F.h@E.~6.1..Pi/.81WE...#..dK.a ..cp:.r...4.g.N...8wz.q..q./.[..._...I."..._x.=9....^-<.}].>..n.....j...........**...W.l..M[.=.TA[.?..g.;....L?z....C"(d.....`..x.@3...6 "^....Uc.@.. .b.~.@..........x.....`.LT.Lb... ..L.....HMX..........D{...e..y....,M>..V....A.Em.&..H...Tu'f.....$kk.n..N>\.....;.\'....u....DWq..*cB..E$.X,/1........v.?{........5..........BQ..eQ5.o6..#..q.*gOs....A...|..>..c....H.r. !....B.G#..b....&.l..R.b2....._x....W`.....?....8.>..C>3.UmY~X-..g.vsi........q...2...98.....s...;.tH.....y...1aW......6U..m...s;..F.*7G.H.>...*.z.a.6{M........_ .9v.^5.2I\6@ju... .&w.V;..^.........Z9..tI-../.5.).__.7I......4.bS67...E..p*0!.<....<4..H,...;......L..j .|.=Q....)...... .TfS|4.~.[..M...X'...4.{u.o...........Fl". ..4............|g....6..../......XI...R/....N..,....0.(..B.......=..2.G.$...9..>........#30..4c.H=..:'....J. JrP.zaGO.rOE..IyJ|B..^.o..r.....C*..<.z''...d..Y...y...G....o..4p.....<. ....#.K....%..O....3....X.U...j uP.um,.T.....t.. .u.I...B3.:2.T..e]6..W....2 .b.8...1.....!Z8B1*k......m....".B..cG7.<$......;...=N....6y..J...vn..x...".....{./.N..y..Q>Y..yu.....|m.....9.{..z.i.......>.\.....q.v.^.pT..=a........b..X6..tNW=..
<<< skipped >>>
GET /wp-content/themes/goodnews/assets/vendors/jquery-nicescroll/jquery.nicescroll.min.js HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:08 GMT
Last-Modified: Sat, 22 Oct 2016 09:21:21 GMT
Content-Type: application/javascript
Content-Length: 19471
Content-Encoding: gzip
Vary: Accept-Encoding,Accept-Encoding
Date: Fri, 13 Jan 2017 19:36:08 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
...........}mw.F.... d...i..%;.....{<79.'..3...w.EB".....DZ....S.. $......nv,../.......'......E'..$.!I.z.....iv./..].;._NO.g.4......$.{Yw.u~..>u.:...h...........i1Y]f.zp......V/7...../.NRM.|Y'.^.f..`.-..Y....*'.j9..Nr.tO.....^......']S.xx..V.|.u...Aw.K./:.....Q..9..N. z5.....-..Q.ea:=*...R..|....O.zy.....W........i.....e..........~.k.(..iz./.........j._....(...[t..U&..$.o.8..;O.]..l'_.L...tr:{.4.....N.{..m.%....*..X.U.....[.....C......U-s..............{^o........P..%.U]$......X.'y.....a.h.....I1/.Q./....m{.O..(.l..%gE9.P.`....y>.......m9....4.m..y.......wY......rt..W....,...r.......,_V..FO.=........,8 .......g..H.W}...@..2s...L..-.gs@....,.f..4...._/.b....{.9).u...?H...H.e....=;.-......WfN......|^...jB....<.8.S.. ,Pv6....b9.N..M],.r..;......gE]c....4.8.bU..u...(......x._,F....TW.H{Kz.@P=...3A....]..l.!...lsV.K.U].E=...Ye.\.]...H7.b..x..T.z.....,.4/3a..8.....f...%...l>.....=.....ut.........$]r..P....u....L...R..Y...B&..b.b!....x.u...P.....y9.&.3..]..]..{....;.c..I......... ...R...S..j2 .K.3O.....-...........#...3..A8../9...=Y#....g..q....i.5.G~.?.U9..._b...Eq....<..=c/.....l1./....[.uW%w...vxq....'...@....$...O8...........'R..$.41....4H....y{....mp......z.-.S..D.p......a....&8...>.&..cV_..]..[|...<MN.._@.;...7(z..".^..........x[....d<.w..(....H.?M.6.. ...x2{..U.Ma(G..f.|*..$....o..e.n.....RZ*...~.>....8.ux..................e...A.@'......|...F...yD.~E..4 V....8..tp0..=..-.....p.../.....|P...8:..i._]`U........./.6.......]U....]7...aW..9H.M....2...U..}/..}.&.< .._O.Q.._.f.D..ugX....
<<< skipped >>>
GET /wp-content/themes/goodnews/lib/modules/social-share/img/ajax-loader.gif HTTP/1.1
Accept: */*
Referer: hXXp://teknogezgini.net/oyun/farming-simulator-17-hayvancilik.html
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C)
Host: teknogezgini.net
Connection: Keep-Alive
Cookie: view_693_c4eef3c35b88ba82fe49ba376e5c1dd7=1; PHPSESSID=a06b33c6a7af7b98654cfe39618ff920
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Expires: Fri, 20 Jan 2017 19:36:39 GMT
Last-Modified: Sat, 22 Oct 2016 09:25:09 GMT
Content-Type: image/gif
Content-Length: 723
Date: Fri, 13 Jan 2017 19:36:39 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Connection: Keep-Alive
GIF89a..........DDD.........HHHDDDeee.........\\\zzz.........___FFF}}}.........mmm...........................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,..........- .di........@..8.5p.{...........@...s...E..B.!.......,..........$`a..`..i.................X/(...;.....!.......,..........6 ..a,..$."..c.b.(......2.......[..K.......N..U.*..N...!.......,..........5 ...E.T...4b$I..<...uy.;......>b.G.....s9..y....*.R!.!.......,..........2 .di...X.DQ..H.bRUE..].:^....f._Q.#......c.J......!.......,..........7 .di.$q]...b.i..a.h...m.]. ....a.....M$..4._-.66....R..!.......,........../ .di..DQ.....r.%R...5....p......q...^-.4.CY....!.......,........../ .di..DQ.....r.%R...5....p......q...^-.4.CY....;.........HTTP/1.1 200 OK..Cache-Control: max-age=2592000 ..Expires: Fri, 20 Jan 2017 19:36:39 GMT..Last-Modified: Sat, 22 Oct 2016 09:25:09 GMT..Content-Type: image/gif..Content-Length: 723..Date: Fri, 13 Jan 2017 19:36:39 GMT..Accept-Ranges: bytes..Server: LiteSpeed..Connection: Keep-Alive..GIF89a..........DDD.........HHHDDDeee.........\\\zzz.........___FFF}}}.........mmm...........................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,..........- .di........@..8.5p.{...........@...s...E..B.!.......,..........$`a..`..i.................X/(...;.....!.......,..........6 ..a,..$."..c.b.(......2.......[..K.......N..U.*..N...!.......,..........5 ...E.T...4b$I..<...uy.;......>b.G.....s9..y....*.R!.!.......,..........2 .di...X.DQ..H.bRUE..].:^....f._Q.#......c.J......!.......,.
<<< skipped >>>
GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== HTTP/1.1
Cache-Control: max-age = 564348
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Wed, 12 Oct 2016 22:33:53 GMT
User-Agent: Microsoft-CryptoAPI/6.1
Host: g.symcd.com
HTTP/1.1 200 OK
Server: nginx/1.10.2
Content-Type: application/ocsp-response
Content-Length: 1377
content-transfer-encoding: binary
Cache-Control: max-age=569527, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Jan 2017 09:45:37 GMT
Expires: Fri, 20 Jan 2017 09:45:37 GMT
Date: Fri, 13 Jan 2017 19:36:21 GMT
Connection: keep-alive
0..]......V0..R.. .....0.....C0..?0......V.T'S...q..."...zr.*..20170113094537Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U....... ...:.....20170113094537Z....20170120094537Z0...*.H.............;7[...>=r.n.."t.&.C..u.y^RE..v?....1..{..=.YFF...K...jV.s.1.tf.......7....6!....g.........rZ.a.E.:...aa...Lov...:..[v2.e..:-........d.....Kx.7_..;...B..>.E!.(g=..tsr.....HG....`.....z\h..@......8..a.....t... :...ub^w.K.p..@^.)...._.z,.JX.......F. U...Y........0...0...0..s............ ...y..^..g0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U....GeoTrust Global CA0...161208112535Z..171214112535Z02100...U...'GeoTrust Global CA TGV OCSP Responder 50.."0...*.H.............0...............S....!....,.t.?....d...M@.._.=.S..,."......Gdv._c..D1..N'E.:.....a2.......{/rD. .c.2..P...!.....Xn..}....{{.zI9.Y....../.....;.......fu..,...B._o..B..g....o........?Y\.?...y.H*..]yi.....3.......F.6.....Q.........{B..19..Kz...\z...P..._...-!.....'.Ym........0..0...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......0...U...........0...U.......0.0"..U....0...0.1.0...U....TGV-OFF-570...*.H..............md.....yV{......y:5..@l#..5.......o..X....,r}......i..3..o.e...e5..@..H/Q..;.vd..?.j.m....../hv..A.......g.......a.....G..\.'*.b..>.....L.Y.To<.@>...&1..9.w.....N*Au.e.....b..K...PO47.J.....{.C\....G..0/.a.Eo.`z.<;IA... #.''.CG..K@7z..7.\_..'.]q.f._.WN....
<<< skipped >>>
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGUhZOTmlkeE HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:31:49 GMT
Expires: Sat, 14 Jan 2017 12:31:49 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 284674
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070920Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..e!d...G.....20170110070920Z....20170117070920Z0...*.H................:..........F.....T. ..a.Mh@#...Z....]p.{......y%.K...S#..:.um\...z[.~..I.s.-|R..>Y.`u9.....G!w.........L..M....E.........2"!Uc9I...x...>U.u......=.aXU.sg..M..\m'...M..J..........).......x?7.V..N|..e.....j.XZ....D.9.j.U.H...KM.....#P.p...3;.t.....6.,._.dHTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:31:49 GMT..Expires: Sat, 14 Jan 2017 12:31:49 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 284674..0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070920Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..e!d...G.....20170110070920Z....20170117070920Z0...*.H................:..........F.....T. ..a.Mh@#...Z....]p.{......y%.K...S#..:.um\...z[.~..I.s.-|R..>Y.`u9.....G!w.........L..M....E.........2"!Uc9I...x...>U.u......=.aXU.sg..M..\m'...M..J..........).......x?7.V..N|..e.....j.XZ....D.9.j.U.H...KM.....#P.p...3;.t.....6.,._.d....
<<< skipped >>>
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAgBmA6zq94/ HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:41:53 GMT
Expires: Sat, 14 Jan 2017 12:41:53 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 284073
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070538Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.........?....20170110070538Z....20170117070538Z0...*.H..............u.e..v.(.YG>..x........ ...z.R...%.....q.p.i.&{.!.7....,...VD)#m.?.Z......~..c!.P...TY........P 0.r..6...{0.7K....;O... ........tD....!v\FhzC...t3.....7 ......b..{..vK<...U......Y.%......._d...!....8.W....v.o.......Fj.|r.'..L......p..?......j.....V...?...HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:41:53 GMT..Expires: Sat, 14 Jan 2017 12:41:53 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 284073..0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070538Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.........?....20170110070538Z....20170117070538Z0...*.H..............u.e..v.(.YG>..x........ ...z.R...%.....q.p.i.&{.!.7....,...VD)#m.?.Z......~..c!.P...TY........P 0.r..6...{0.7K....;O... ........tD....!v\FhzC...t3.....7 ......b..{..vK<...U......Y.%......._d...!....8.W....v.o.......Fj.|r.'..L......p..?......j.....V...?.......
<<< skipped >>>
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCF2/N6VaC7pu HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:47:26 GMT
Expires: Sat, 14 Jan 2017 12:47:26 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 283743
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070107Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..].7.Z..n....20170110070107Z....20170117070107Z0...*.H.............>.....K..Sg..!...!.3.. ....HY..lp.....gE..e..I4..{-...st <....K,4....q3:....o...._.u.."No}v.(..#..$#1..>..Sd....g....l..=.Ub..sO...ms..eQ.........u.._)H....I....:.f.. E....$....X...#..H....)...U.6m..en.0.%].h..v\UJ..i*.j.$w.6...,.[...."u....!..4....v.g.]ndHTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:47:26 GMT..Expires: Sat, 14 Jan 2017 12:47:26 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 283743..0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070107Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..].7.Z..n....20170110070107Z....20170117070107Z0...*.H.............>.....K..Sg..!...!.3.. ....HY..lp.....gE..e..I4..{-...st <....K,4....q3:....o...._.u.."No}v.(..#..$#1..>..Sd....g....l..=.Ub..sO...ms..eQ.........u.._)H....I....:.f.. E....$....X...#..H....)...U.6m..en.0.%].h..v\UJ..i*.j.$w.6...,.[...."u....!..4....v.g.]nd....
<<< skipped >>>
GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCGihEWzZk01n HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: clients1.google.com
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:41:40 GMT
Expires: Sat, 14 Jan 2017 12:41:40 GMT
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=345600
Age: 284122
0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070026Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..h..l..Mg....20170110070026Z....20170117070026Z0...*.H............. ..~......7N:B..Qc.<..6...S.......`"r...MZ7..h .k,...YV..M.O...i}....=.....q..|Zw.......N9..MX........TW...Vk..|JK(O.q.4....=<.... %.p..(p...._$.<.L..x..9..P....D.).l.......yk...B...,...I.\..?2s;0....V..A..Dy..x.........1H5......H"h[*V.K83..T5....6..|...Q.HTTP/1.1 200 OK..Content-Type: application/ocsp-response..Date: Tue, 10 Jan 2017 12:41:40 GMT..Expires: Sat, 14 Jan 2017 12:41:40 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max-age=345600..Age: 284122..0..........0..... .....0......0...0......J......h.v....b..Z./..20170110070026Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./..h..l..Mg....20170110070026Z....20170117070026Z0...*.H............. ..~......7N:B..Qc.<..6...S.......`"r...MZ7..h .k,...YV..M.O...i}....=.....q..|Zw.......N9..MX........TW...Vk..|JK(O.q.4....=<.... %.p..(p...._$.<.L..x..9..P....D.).l.......yk...B...,...I.\..?2s;0....V..A..Dy..x.........1H5......H"h[*V.K83..T5....6..|...Q...
GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6kg== HTTP/1.1
Cache-Control: max-age = 564348
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Wed, 12 Oct 2016 22:33:53 GMT
User-Agent: Microsoft-CryptoAPI/6.1
Host: g.symcd.com
HTTP/1.1 200 OK
Server: nginx/1.10.2
Content-Type: application/ocsp-response
Content-Length: 1377
content-transfer-encoding: binary
Cache-Control: max-age=569534, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Jan 2017 09:45:37 GMT
Expires: Fri, 20 Jan 2017 09:45:37 GMT
Date: Fri, 13 Jan 2017 19:36:21 GMT
Connection: keep-alive
0..]......V0..R.. .....0.....C0..?0......V.T'S...q..."...zr.*..20170113094537Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U....... ...:.....20170113094537Z....20170120094537Z0...*.H.............;7[...>=r.n.."t.&.C..u.y^RE..v?....1..{..=.YFF...K...jV.s.1.tf.......7....6!....g.........rZ.a.E.:...aa...Lov...:..[v2.e..:-........d.....Kx.7_..;...B..>.E!.(g=..tsr.....HG....`.....z\h..@......8..a.....t... :...ub^w.K.p..@^.)...._.z,.JX.......F. U...Y........0...0...0..s............ ...y..^..g0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U....GeoTrust Global CA0...161208112535Z..171214112535Z02100...U...'GeoTrust Global CA TGV OCSP Responder 50.."0...*.H.............0...............S....!....,.t.?....d...M@.._.=.S..,."......Gdv._c..D1..N'E.:.....a2.......{/rD. .c.2..P...!.....Xn..}....{{.zI9.Y....../.....;.......fu..,...B._o..B..g....o........?Y\.?...y.H*..]yi.....3.......F.6.....Q.........{B..19..Kz...\z...P..._...-!.....'.Ym........0..0...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......0...U...........0...U.......0.0"..U....0...0.1.0...U....TGV-OFF-570...*.H..............md.....yV{......y:5..@l#..5.......o..X....,r}......i..3..o.e...e5..@..H/Q..;.vd..?.j.m....../hv..A.......g.......a.....G..\.'*.b..>.....L.Y.To<.@>...&1..9.w.....N*Au.e.....b..K...PO47.J.....{.C\....G..0/.a.Eo.`z.<;IA... #.''.CG..K@7z..7.\_..'.]q.f._.WN....
<<< skipped >>>
Map
The Worm connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_2472:
.text
.text
`.data
`.data
.rsrc
.rsrc
ADVAPI32.dll
ADVAPI32.dll
KERNEL32.dll
KERNEL32.dll
NTDLL.DLL
NTDLL.DLL
GDI32.dll
GDI32.dll
USER32.dll
USER32.dll
COMCTL32.dll
COMCTL32.dll
VERSION.dll
VERSION.dll
advapi32.dll
advapi32.dll
advpack.dll
advpack.dll
wininit.ini
wininit.ini
Software\Microsoft\Windows\CurrentVersion\App Paths
Software\Microsoft\Windows\CurrentVersion\App Paths
setupapi.dll
setupapi.dll
setupx.dll
setupx.dll
IXPd.TMP
IXPd.TMP
TMP4351$.TMP
TMP4351$.TMP
FINISHMSG
FINISHMSG
USRQCMD
USRQCMD
ADMQCMD
ADMQCMD
msdownld.tmp
msdownld.tmp
wextract.pdb
wextract.pdb
PSSSSSSh
PSSSSSSh
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyA
GetWindowsDirectoryA
GetWindowsDirectoryA
ExitWindowsEx
ExitWindowsEx
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
rundll32.exe %s,InstallHinfSection %s 128 %s
rundll32.exe %s,InstallHinfSection %s 128 %s
SHELL32.DLL
SHELL32.DLL
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows\CurrentVersion\RunOnce
PendingFileRenameOperations
PendingFileRenameOperations
System\CurrentControlSet\Control\Session Manager\FileRenameOperations
System\CurrentControlSet\Control\Session Manager\FileRenameOperations
wextract_cleanup%d
wextract_cleanup%d
%s /D:%s
%s /D:%s
rundll32.exe %sadvpack.dll,DelNodeRunDLL32 "%s"
rundll32.exe %sadvpack.dll,DelNodeRunDLL32 "%s"
Command.com /c %s
Command.com /c %s
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\IXP000.TMP\
.XqX951
.XqX951
cËs
cËs
webjc
webjc
`f.iVZu1
`f.iVZu1
CSRKPR~1.EXE
CSRKPR~1.EXE
22.exe
22.exe
%xd(1#3
%xd(1#3
%s'A8
%s'A8
%S"[Bf9
%S"[Bf9
N.TFg
N.TFg
0}.rQ
0}.rQ
%.x48
%.x48
9{L%S
9{L%S
Dw%xW
Dw%xW
Tle%S
Tle%S
-vs}a
-vs}a
SV%dr
SV%dr
.Gp I
.Gp I
l.ChE"
l.ChE"
_#2iIM%2x
_#2iIM%2x
D.Av'
D.Av'
%cUZ7
%cUZ7
.xE*S
.xE*S
bkc%D
bkc%D
r.Hym
r.Hym
2Sshb
2Sshb
t4|"-f.Rf
t4|"-f.Rf
O.hi>
O.hi>
mH.AMn
mH.AMn
.Eo{F
.Eo{F
.rlG>
.rlG>
rM'w].zL
rM'w].zL
.jy/%
.jy/%
.ei`U
.ei`U
j*L.mLd
j*L.mLd
.QuP8
.QuP8
3-X}o
3-X}o
:".ay
:".ay
*;1%s#u
*;1%s#u
2.DP'
2.DP'
1!L-.HH/f
1!L-.HH/f
vlcÓ.
vlcÓ.
%
%
.ioPz-
.ioPz-
.bXv)
.bXv)
uM.wN
uM.wN
%,I%S
%,I%S
1-h}h
1-h}h
.PeF!
.PeF!
.qmez
.qmez
C;.Ja0
C;.Ja0
B.cPCgg
B.cPCgg
a%uv4
a%uv4
oÑX
oÑX
}.oL*H
}.oL*H
A#.GM
A#.GM
.crp
.crp
.Azc*
.Azc*
.tXt[P
.tXt[P
&c}D%f
&c}D%f
/s.MP
/s.MP
J|Z.nQ
J|Z.nQ
%VI%F
%VI%F
lSQ^%s
lSQ^%s
;u%2x
;u%2x
fUdP
fUdP
@x.wL
@x.wL
^ON%x
^ON%x
k$_%f$
k$_%f$
;.wcv
;.wcv
`.eWRB
`.eWRB
.lg]\
.lg]\
i2%f@ J
i2%f@ J
,v6%F
,v6%F
g.Mkl
g.Mkl
.Ttb
.Ttb
%UQN9:
%UQN9:
FRÀ
FRÀ
%UXgV
%UXgV
7.Mq
7.Mq
W0%7U
W0%7U
.Sh\}
.Sh\}
.vKhKv
.vKhKv
V!%sb
V!%sb
Gr.CeO4R&b
Gr.CeO4R&b
c.yD.p
c.yD.p
.n .jl
.n .jl
h%i-yK}
h%i-yK}
okeY#
okeY#
CRt8eF
CRt8eF
.spUyDRU\
.spUyDRU\
N.wMw
N.wMw
.iYv(
.iYv(
]}SD.wI
]}SD.wI
F8.Kd
F8.Kd
?!> %S
?!> %S
>`^~\">
>`^~\">
i1U.yU
i1U.yU
"S-X}[d
"S-X}[d
jX.oT
jX.oT
.Rc26
.Rc26
-RtI}/
-RtI}/
P%D}Y
P%D}Y
~.LJ1
~.LJ1
#FQG%F
#FQG%F
8ÑL
8ÑL
.Ij/C!mm
.Ij/C!mm
.ws1^
.ws1^
S&k.CU
S&k.CU
=4.uW\
=4.uW\
1J.AZ
1J.AZ
%4sfkHy
%4sfkHy
-5.QMh
-5.QMh
.Ueu
.Ueu
s.Ki]
s.Ki]
f%Ux'
f%Ux'
.KI7*
.KI7*
.lXY~
.lXY~
M.Stg
M.Stg
.yG"7B
.yG"7B
d-%F"
d-%F"
Jz.WA
Jz.WA
L6%fU
L6%fU
.EA|_Y
.EA|_Y
S'%XE,
S'%XE,
4%C sD
4%C sD
9k.^%u
9k.^%u
.Tbv1Yn}
.Tbv1Yn}
%Xkd#
%Xkd#
zh%xS)
zh%xS)
j%DI(
j%DI(
owq-
owq-
iv7.mqx1
iv7.mqx1
]k.Zn
]k.Zn
W.EYW
W.EYW
=%X83EQX
=%X83EQX
.Zc2T
.Zc2T
p%d%3Xv?n
p%d%3Xv?n
a a%Xj
a a%Xj
!".YR
!".YR
<.zfj>
<.zfj>
Y.HCd*
Y.HCd*
x.VX0
x.VX0
RV%CU
RV%CU
`]%FG2$=
`]%FG2$=
.sJgL
.sJgL
wY.Ku
wY.Ku
98.pL
98.pL
7R3%C
7R3%C
$%UvP
$%UvP
Q.jEl
Q.jEl
bD.MA
bD.MA
.Dd_q
.Dd_q
\9lFu%F
\9lFu%F
%C]-K
%C]-K
.bw'y)
.bw'y)
Oi%Dw^
Oi%Dw^
%3U];
%3U];
Ok.Ha
Ok.Ha
5t.dz
5t.dz
ez>l.GN
ez>l.GN
|.Sf%
|.Sf%
;b.ip
;b.ip
.rW(T{uj
.rW(T{uj
e.rds
e.rds
H.Oh@Sc
H.Oh@Sc
.feK3
.feK3
]6Q%F
]6Q%F
.wuxs
.wuxs
&o=%xCdT
&o=%xCdT
#^[%S
#^[%S
b%FG$
b%FG$
va.Nu
va.Nu
s{.pe_
s{.pe_
;.xg'
;.xg'
ov.DD
ov.DD
..zjl
..zjl
JG.jO
JG.jO
}wm:.UI>:`\
}wm:.UI>:`\
y,.Rz
y,.Rz
.ZJX\
.ZJX\
tr%UE:
tr%UE:
.eSAn
.eSAn
.BL9?
.BL9?
W]Wrlpz%C
W]Wrlpz%C
.GS_i
.GS_i
ERkeY
ERkeY
p.OXq
p.OXq
.jL?8i4zZ
.jL?8i4zZ
w-#0%sy
w-#0%sy
#M..Be
#M..Be
.mNL|M
.mNL|M
mA|%S`f
mA|%S`f
:.fz)a^
:.fz)a^
-eXvG}
-eXvG}
p.ykZ
p.ykZ
m.Xk.f
m.Xk.f
%dkk*
%dkk*
'XO.FE
'XO.FE
|.jFZh
|.jFZh
|.nsIG
|.nsIG
l%I%U
l%I%U
{Y9õ
{Y9õ
&kK%F
&kK%F
.LUV 2
.LUV 2
.Ua]1[
.Ua]1[
&.OX4[
&.OX4[
.LR4dL
.LR4dL
n de espacio en: %s.
n de espacio en: %s.
Mensaje de sistema: %s.5No se puede encontrar uno de los recursos necesarios.#
Mensaje de sistema: %s.5No se puede encontrar uno de los recursos necesarios.#
n del sistema operativo./Error en la solicitud de asignaci
n del sistema operativo./Error en la solicitud de asignaci
n no pudo encontrar una unidad con %s KB de espacio en disco libres para instalar el programa. Libere un poco de espacio primero y presione Reintentar, o presione Cancelar para salir del programa de instalaci
n no pudo encontrar una unidad con %s KB de espacio en disco libres para instalar el programa. Libere un poco de espacio primero y presione Reintentar, o presione Cancelar para salir del programa de instalaci
n.XLa carpeta no es v
n.XLa carpeta no es v
rese de que la carpeta existe y se puede escribir en ella.DDebe especificar una carpeta con la ruta completa o elegir Cancelar.
rese de que la carpeta existe y se puede escribir en ella.DDebe especificar una carpeta con la ruta completa o elegir Cancelar.
n de carpeta.DNo se puede cargar las funciones requeridas por el di
n de carpeta.DNo se puede cargar las funciones requeridas por el di
logo Examinar.\No se pudo cargar el archivo Shell32.dll, requerido por el cuadro de di
logo Examinar.\No se pudo cargar el archivo Shell32.dll, requerido por el cuadro de di
n del proceso . Causa: %s5El tama
n del proceso . Causa: %s5El tama
ster en este sistema no es soportado.3Uno de los recursos necesarios parece estar da
ster en este sistema no es soportado.3Uno de los recursos necesarios parece estar da
ado.[Es necesario Windows 95 o Windows NT 4.0 Beta 2 o posterior para realizar esta instalaci
ado.[Es necesario Windows 95 o Windows NT 4.0 Beta 2 o posterior para realizar esta instalaci
Error al cargar %s]Error de GetProcAddress() en funci
Error al cargar %s]Error de GetProcAddress() en funci
n "%s". Causa posible: versi
n "%s". Causa posible: versi
n incorrecta de advpack.dll.@Es necesario Windows 95 o Windows NT para instalar este producto No se pudo crear la carpeta "%s"
n incorrecta de advpack.dll.@Es necesario Windows 95 o Windows NT para instalar este producto No se pudo crear la carpeta "%s"
Para instalar este programa, necesita %s KB disponibles en la unidad %s. Es recomendable que libere la cantidad necesaria de espacio en disco antes de continuar.
Para instalar este programa, necesita %s KB disponibles en la unidad %s. Es recomendable que libere la cantidad necesaria de espacio en disco antes de continuar.
n de la carpeta de Windows
n de la carpeta de Windows
)Apagar NT: Error en token de OpenProcess.*Apagar NT: Error en AdjustTokenPrivileges."Apagar NT: Error en ExitWindowsEx.
)Apagar NT: Error en token de OpenProcess.*Apagar NT: Error en AdjustTokenPrivileges."Apagar NT: Error en ExitWindowsEx.
n del archivo. Probablemente se deba a un problema de memoria baja (poco espacio en disco para el intercambio de archivos) o un archivo .CAB da
n del archivo. Probablemente se deba a un problema de memoria baja (poco espacio en disco para el intercambio de archivos) o un archivo .CAB da
ado.wEl programa de instalaci
ado.wEl programa de instalaci
n del volumen para la unidad (%s) .
n del volumen para la unidad (%s) .
Mensaje del sistema: %s.
Mensaje del sistema: %s.
n no pudo encontrar una unidad con %s KB de espacio en disco libres para instalar el programa. Libere un poco de espacio e int
n no pudo encontrar una unidad con %s KB de espacio en disco libres para instalar el programa. Libere un poco de espacio e int
ntelo de nuevo.hEl programa de instalaci
ntelo de nuevo.hEl programa de instalaci
[Otra copia del paquete "%s" ya est
[Otra copia del paquete "%s" ya est
Desea ejecutar otra copia?$No se pudo encontrar el archivo: %s.
Desea ejecutar otra copia?$No se pudo encontrar el archivo: %s.
No existe la carpeta "%s".
No existe la carpeta "%s".
Desea crearla?lOtra copia del paquete "%s" ya est
Desea crearla?lOtra copia del paquete "%s" ya est
lo es posible ejecutar una copia a la vez.OEl paquete "%s" no es compatible con la versi
lo es posible ejecutar una copia a la vez.OEl paquete "%s" no es compatible con la versi
n de Windows que est
n de Windows que est
ejecutando.^El paquete "%s" no es compatible con la versi
ejecutando.^El paquete "%s" no es compatible con la versi
n del archivo %s que se encuentra en su sistema.
n del archivo %s que se encuentra en su sistema.
6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
WEXTRACT.EXE
WEXTRACT.EXE
Sistema operativo Microsoft
Sistema operativo Microsoft
Windows
Windows
6.00.2900.2180
6.00.2900.2180
22.exe_1804_rwx_003C0000_0000D000:
.MXh3
.MXh3
CDT.exe_2840:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
SSh8BS
SSh8BS
udPhPqY
udPhPqY
SSh@ S
SSh@ S
PSSSSSSh
PSSSSSSh
PSSSSSSh!
PSSSSSSh!
vSSSh
vSSSh
FTPjK
FTPjK
FtPj;
FtPj;
C.PjRV
C.PjRV
tGHt.Ht&
tGHt.Ht&
.EKSWU
.EKSWU
FTPG
FTPG
FTPj
FTPj
FtPS
FtPS
=KNILw.tT=RCNEw
=KNILw.tT=RCNEw
_0 _8 _4;_,
_0 _8 _4;_,
SHA1 block transform for x86, CRYPTOGAMS by
SHA1 block transform for x86, CRYPTOGAMS by
SHA256 block transform for x86, CRYPTOGAMS by
SHA256 block transform for x86, CRYPTOGAMS by
DlSHA512 block transform for x86, CRYPTOGAMS by
DlSHA512 block transform for x86, CRYPTOGAMS by
Montgomery Multiplication for x86, CRYPTOGAMS by
Montgomery Multiplication for x86, CRYPTOGAMS by
6-9'6-9'
6-9'6-9'
$6.:$6.:
$6.:$6.:
*?#1*?#1
*?#1*?#1
>8$4,8$4,
>8$4,8$4,
AES for x86, CRYPTOGAMS by
AES for x86, CRYPTOGAMS by
Camellia for x86 by
Camellia for x86 by
RC4 for x86, CRYPTOGAMS by
RC4 for x86, CRYPTOGAMS by
v9.uj#
v9.uj#
FRegDeleteKeyExW
FRegDeleteKeyExW
gmail.com
gmail.com
MARGIN-BOTTOM: 11px; BORDER-STYLE: solid; BORDER-COLOR: #DFDFE5; BORDER-WIDTH: 2px; BACKGROUND-COLOR: #DFDFE5; }H2 { COLOR: black; BACKGROUND-COLOR: #FFFFF; FONT-SIZE: 12pt; FONT-WEIGHT: normal; MARGIN-BOTTOM: 0px; MARGIN-TOP: 10px;}
MARGIN-BOTTOM: 11px; BORDER-STYLE: solid; BORDER-COLOR: #DFDFE5; BORDER-WIDTH: 2px; BACKGROUND-COLOR: #DFDFE5; }H2 { COLOR: black; BACKGROUND-COLOR: #FFFFF; FONT-SIZE: 12pt; FONT-WEIGHT: normal; MARGIN-BOTTOM: 0px; MARGIN-TOP: 10px;}
mail@domain.com
mail@domain.com
Date: %d %s %d %d:%d:%d
Date: %d %s %d %d:%d:%d
EHLO %s
EHLO %s
,qop=%s
,qop=%s
,response=%s
,response=%s
,digest-uri="%s"
,digest-uri="%s"
,cnonce="%s"
,cnonce="%s"
,nc=%s
,nc=%s
,nonce="%s"
,nonce="%s"
,realm="%s"
,realm="%s"
charset=utf-8,username="%s"
charset=utf-8,username="%s"
smtp/
smtp/
AUTH PLAIN %s
AUTH PLAIN %s
^%s^%s
^%s^%s
AUTH LOGIN
AUTH LOGIN
LOGIN
LOGIN
--%s--
--%s--
RCPT TO:
RCPT TO:
MAIL FROM:
MAIL FROM:
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
operator
operator
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
portuguese-brazilian
portuguese-brazilian
ADVAPI32.DLL
ADVAPI32.DLL
kernel32.dll
kernel32.dll
UxTheme.dll
UxTheme.dll
OLEACC.dll
OLEACC.dll
passed a null parameter
passed a null parameter
DSO support routines
DSO support routines
x509 certificate routines
x509 certificate routines
error:lX:%s:%s:%s
error:lX:%s:%s:%s
ssl_sess_cert
ssl_sess_cert
ssl_cert
ssl_cert
evp_pkey
evp_pkey
x509_pkey
x509_pkey
%s(%d): OpenSSL internal error, assertion failed: %s
%s(%d): OpenSSL internal error, assertion failed: %s
lhash part of OpenSSL 1.0.0d 8 Feb 2011
lhash part of OpenSSL 1.0.0d 8 Feb 2011
Stack part of OpenSSL 1.0.0d 8 Feb 2011
Stack part of OpenSSL 1.0.0d 8 Feb 2011
supportedAlgorithms
supportedAlgorithms
crossCertificatePair
crossCertificatePair
certificateRevocationList
certificateRevocationList
cACertificate
cACertificate
userCertificate
userCertificate
userPassword
userPassword
supportedApplicationContext
supportedApplicationContext
Microsoft Local Key set
Microsoft Local Key set
LocalKeySet
LocalKeySet
id-Gost28147-89-None-KeyMeshing
id-Gost28147-89-None-KeyMeshing
id-Gost28147-89-CryptoPro-KeyMeshing
id-Gost28147-89-CryptoPro-KeyMeshing
password based MAC
password based MAC
id-PasswordBasedMAC
id-PasswordBasedMAC
X509v3 Certificate Issuer
X509v3 Certificate Issuer
certificateIssuer
certificateIssuer
certicom-arc
certicom-arc
Proxy Certificate Information
Proxy Certificate Information
proxyCertInfo
proxyCertInfo
Microsoft Smartcardlogin
Microsoft Smartcardlogin
msSmartcardLogin
msSmartcardLogin
joint-iso-itu-t
joint-iso-itu-t
JOINT-ISO-ITU-T
JOINT-ISO-ITU-T
set-rootKeyThumb
set-rootKeyThumb
setAttr-Cert
setAttr-Cert
setCext-cCertRequired
setCext-cCertRequired
setCext-certType
setCext-certType
setct-CertResTBE
setct-CertResTBE
setct-CertReqTBEX
setct-CertReqTBEX
setct-CertReqTBE
setct-CertReqTBE
setct-AcqCardCodeMsgTBE
setct-AcqCardCodeMsgTBE
setct-CertInqReqTBS
setct-CertInqReqTBS
setct-CertResData
setct-CertResData
setct-CertReqTBS
setct-CertReqTBS
setct-CertReqData
setct-CertReqData
setct-PCertResTBS
setct-PCertResTBS
setct-PCertReqData
setct-PCertReqData
setct-AcqCardCodeMsg
setct-AcqCardCodeMsg
certificate extensions
certificate extensions
set-certExt
set-certExt
set-msgExt
set-msgExt
id-ecPublicKey
id-ecPublicKey
id-cmc-confirmCertAcceptance
id-cmc-confirmCertAcceptance
id-cmc-getCert
id-cmc-getCert
id-regInfo-certReq
id-regInfo-certReq
id-regCtrl-protocolEncrKey
id-regCtrl-protocolEncrKey
id-regCtrl-oldCertID
id-regCtrl-oldCertID
id-it-revPassphrase
id-it-revPassphrase
id-it-keyPairParamRep
id-it-keyPairParamRep
id-it-keyPairParamReq
id-it-keyPairParamReq
id-it-unsupportedOIDs
id-it-unsupportedOIDs
id-it-caKeyUpdateInfo
id-it-caKeyUpdateInfo
id-it-encKeyPairTypes
id-it-encKeyPairTypes
id-it-signKeyPairTypes
id-it-signKeyPairTypes
id-it-caProtEncCert
id-it-caProtEncCert
id-mod-attribute-cert
id-mod-attribute-cert
id-mod-qualified-cert-93
id-mod-qualified-cert-93
id-mod-qualified-cert-88
id-mod-qualified-cert-88
id-smime-aa-ets-certCRLTimestamp
id-smime-aa-ets-certCRLTimestamp
id-smime-aa-ets-certValues
id-smime-aa-ets-certValues
id-smime-aa-ets-CertificateRefs
id-smime-aa-ets-CertificateRefs
id-smime-aa-ets-otherSigCert
id-smime-aa-ets-otherSigCert
id-smime-aa-smimeEncryptCerts
id-smime-aa-smimeEncryptCerts
id-smime-aa-signingCertificate
id-smime-aa-signingCertificate
id-smime-aa-encrypKeyPref
id-smime-aa-encrypKeyPref
id-smime-aa-msgSigDigest
id-smime-aa-msgSigDigest
id-smime-ct-publishCert
id-smime-ct-publishCert
id-smime-mod-msg-v3
id-smime-mod-msg-v3
sdsiCertificate
sdsiCertificate
x509Certificate
x509Certificate
localKeyID
localKeyID
certBag
certBag
pkcs8ShroudedKeyBag
pkcs8ShroudedKeyBag
keyBag
keyBag
pbeWithSHA1And2-KeyTripleDES-CBC
pbeWithSHA1And2-KeyTripleDES-CBC
pbeWithSHA1And3-KeyTripleDES-CBC
pbeWithSHA1And3-KeyTripleDES-CBC
TLS Web Client Authentication
TLS Web Client Authentication
TLS Web Server Authentication
TLS Web Server Authentication
X509v3 Extended Key Usage
X509v3 Extended Key Usage
extendedKeyUsage
extendedKeyUsage
X509v3 Authority Key Identifier
X509v3 Authority Key Identifier
authorityKeyIdentifier
authorityKeyIdentifier
X509v3 Certificate Policies
X509v3 Certificate Policies
certificatePolicies
certificatePolicies
X509v3 Private Key Usage Period
X509v3 Private Key Usage Period
privateKeyUsagePeriod
privateKeyUsagePeriod
X509v3 Key Usage
X509v3 Key Usage
keyUsage
keyUsage
X509v3 Subject Key Identifier
X509v3 Subject Key Identifier
subjectKeyIdentifier
subjectKeyIdentifier
Netscape Certificate Sequence
Netscape Certificate Sequence
nsCertSequence
nsCertSequence
Netscape CA Policy Url
Netscape CA Policy Url
nsCaPolicyUrl
nsCaPolicyUrl
Netscape Renewal Url
Netscape Renewal Url
nsRenewalUrl
nsRenewalUrl
Netscape CA Revocation Url
Netscape CA Revocation Url
nsCaRevocationUrl
nsCaRevocationUrl
Netscape Revocation Url
Netscape Revocation Url
nsRevocationUrl
nsRevocationUrl
Netscape Base Url
Netscape Base Url
nsBaseUrl
nsBaseUrl
Netscape Cert Type
Netscape Cert Type
nsCertType
nsCertType
Netscape Certificate Extension
Netscape Certificate Extension
nsCertExt
nsCertExt
extendedCertificateAttributes
extendedCertificateAttributes
challengePassword
challengePassword
dhKeyAgreement
dhKeyAgreement
Big Number part of OpenSSL 1.0.0d 8 Feb 2011
Big Number part of OpenSSL 1.0.0d 8 Feb 2011
ASN.1 part of OpenSSL 1.0.0d 8 Feb 2011
ASN.1 part of OpenSSL 1.0.0d 8 Feb 2011
keylen
keylen
EVP_CIPHER_key_length(cipher)
EVP_CIPHER_key_length(cipher)
len>=0 && lenkey)
len>=0 && lenkey)
j key)
j key)
keylength
keylength
keyfunc
keyfunc
EVP part of OpenSSL 1.0.0d 8 Feb 2011
EVP part of OpenSSL 1.0.0d 8 Feb 2011
.\crypto\pkcs12\p12_key.c
.\crypto\pkcs12\p12_key.c
SHA1 part of OpenSSL 1.0.0d 8 Feb 2011
SHA1 part of OpenSSL 1.0.0d 8 Feb 2011
SHA-256 part of OpenSSL 1.0.0d 8 Feb 2011
SHA-256 part of OpenSSL 1.0.0d 8 Feb 2011
SHA-512 part of OpenSSL 1.0.0d 8 Feb 2011
SHA-512 part of OpenSSL 1.0.0d 8 Feb 2011
RSA part of OpenSSL 1.0.0d 8 Feb 2011
RSA part of OpenSSL 1.0.0d 8 Feb 2011
RAND part of OpenSSL 1.0.0d 8 Feb 2011
RAND part of OpenSSL 1.0.0d 8 Feb 2011
You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html
You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html
value.bag
value.bag
value.safes
value.safes
value.shkeybag
value.shkeybag
value.keybag
value.keybag
value.sdsicert
value.sdsicert
value.x509cert
value.x509cert
value.other
value.other
cert_info
cert_info
hexkey
hexkey
rsa_keygen_pubexp
rsa_keygen_pubexp
rsa_keygen_bits
rsa_keygen_bits
NETAPI32.DLL
NETAPI32.DLL
KERNEL32.DLL
KERNEL32.DLL
value.single
value.single
value.set
value.set
PKCS8_PRIV_KEY_INFO
PKCS8_PRIV_KEY_INFO
pkey
pkey
pkeyalg
pkeyalg
enc_key
enc_key
key_enc_algor
key_enc_algor
cert
cert
d.encrypted
d.encrypted
d.digest
d.digest
d.signed_and_enveloped
d.signed_and_enveloped
d.enveloped
d.enveloped
d.sign
d.sign
d.data
d.data
d.other
d.other
X509_PUBKEY
X509_PUBKEY
public_key
public_key
.\crypto\asn1\x_pubkey.c
.\crypto\asn1\x_pubkey.c
%d.%d.%d.%d/%d.%d.%d.%d
%d.%d.%d.%d/%d.%d.%d.%d
%*s%s:
%*s%s:
d.registeredID
d.registeredID
d.iPAddress
d.iPAddress
d.uniformResourceIdentifier
d.uniformResourceIdentifier
d.ediPartyName
d.ediPartyName
d.directoryName
d.directoryName
d.dNSName
d.dNSName
d.rfc822Name
d.rfc822Name
d.otherName
d.otherName
name.relativename
name.relativename
name.fullname
name.fullname
certificateHold
certificateHold
Certificate Hold
Certificate Hold
cessationOfOperation
cessationOfOperation
Cessation Of Operation
Cessation Of Operation
keyCompromise
keyCompromise
Key Compromise
Key Compromise
%*sOnly Attribute Certificates
%*sOnly Attribute Certificates
%*sOnly CA Certificates
%*sOnly CA Certificates
%*sOnly User Certificates
%*sOnly User Certificates
AUTHORITY_KEYID
AUTHORITY_KEYID
keyid
keyid
X509_CERT_PAIR
X509_CERT_PAIR
X509_CERT_AUX
X509_CERT_AUX
%d.%d.%d.%d
%d.%d.%d.%d
EC part of OpenSSL 1.0.0d 8 Feb 2011
EC part of OpenSSL 1.0.0d 8 Feb 2011
ECDSA part of OpenSSL 1.0.0d 8 Feb 2011
ECDSA part of OpenSSL 1.0.0d 8 Feb 2011
.\crypto\ec\ec_key.c
.\crypto\ec\ec_key.c
DSA part of OpenSSL 1.0.0d 8 Feb 2011
DSA part of OpenSSL 1.0.0d 8 Feb 2011
Diffie-Hellman part of OpenSSL 1.0.0d 8 Feb 2011
Diffie-Hellman part of OpenSSL 1.0.0d 8 Feb 2011
.\crypto\dh\dh_key.c
.\crypto\dh\dh_key.c
\X
\X
IP Address:%d.%d.%d.%d
IP Address:%d.%d.%d.%d
URI:%s
URI:%s
DNS:%s
DNS:%s
email:%s
email:%s
EdiPartyName:
EdiPartyName:
X400Name:
X400Name:
othername:
othername:
d.usernotice
d.usernotice
d.cpsuri
d.cpsuri
CERTIFICATEPOLICIES
CERTIFICATEPOLICIES
%*sExplicit Text: %s
%*sExplicit Text: %s
%*sNumber%s:
%*sNumber%s:
%*sOrganization: %s
%*sOrganization: %s
%*sCPS: %s
%*sCPS: %s
ddddddZ
ddddddZ
ddddddZ
ddddddZ
pubkey
pubkey
priv_key
priv_key
pub_key
pub_key
EC_PRIVATEKEY
EC_PRIVATEKEY
publicKey
publicKey
privateKey
privateKey
value.implicitlyCA
value.implicitlyCA
value.parameters
value.parameters
value.named_curve
value.named_curve
p.char_two
p.char_two
p.prime
p.prime
p.ppBasis
p.ppBasis
p.tpBasis
p.tpBasis
p.onBasis
p.onBasis
p.other
p.other
.\crypto\evp\evp_pkey.c
.\crypto\evp\evp_pkey.c
ECDH part of OpenSSL 1.0.0d 8 Feb 2011
ECDH part of OpenSSL 1.0.0d 8 Feb 2011
%'%1$=%C%K%O%s%
%'%1$=%C%K%O%s%
.%.-.3.7.9.?.W.[.o.y.
.%.-.3.7.9.?.W.[.o.y.
C%C'C3C7C9COCWCiC
C%C'C3C7C9COCWCiC
%s: (%d bit)
%s: (%d bit)
Public-Key
Public-Key
Private-Key
Private-Key
recommended-private-length: %d bits
recommended-private-length: %d bits
public-key:
public-key:
private-key:
private-key:
PKCS#3 DH Public-Key
PKCS#3 DH Public-Key
PKCS#3 DH Private-Key
PKCS#3 DH Private-Key
Public-Key: (%d bit)
Public-Key: (%d bit)
Private-Key: (%d bit)
Private-Key: (%d bit)
X.509 part of OpenSSL 1.0.0d 8 Feb 2011
X.509 part of OpenSSL 1.0.0d 8 Feb 2011
OPENSSL_ALLOW_PROXY_CERTS
OPENSSL_ALLOW_PROXY_CERTS
x%s
x%s
%s - d:d:d%.*s %d%s
%s - d:d:d%.*s %d%s
'() ,-./:=?
'() ,-./:=?
CONF part of OpenSSL 1.0.0d 8 Feb 2011
CONF part of OpenSSL 1.0.0d 8 Feb 2011
%*sPolicy Text: %s
%*sPolicy Text: %s
%*scrlUrl:
%*scrlUrl:
EXTENDED_KEY_USAGE
EXTENDED_KEY_USAGE
%*sZone: %s, User:
%*sZone: %s, User:
.\crypto\x509v3\v3_akey.c
.\crypto\x509v3\v3_akey.c
PKEY_USAGE_PERIOD
PKEY_USAGE_PERIOD
keyCertSign
keyCertSign
Certificate Sign
Certificate Sign
keyAgreement
keyAgreement
Key Agreement
Key Agreement
keyEncipherment
keyEncipherment
Key Encipherment
Key Encipherment
.\crypto\x509v3\v3_skey.c
.\crypto\x509v3\v3_skey.c
MD5 part of OpenSSL 1.0.0d 8 Feb 2011
MD5 part of OpenSSL 1.0.0d 8 Feb 2011
PROXY_CERT_INFO_EXTENSION
PROXY_CERT_INFO_EXTENSION
D:/Projects/openssl-10.0d/ssl/certs
D:/Projects/openssl-10.0d/ssl/certs
D:/Projects/openssl-10.0d/ssl/cert.pem
D:/Projects/openssl-10.0d/ssl/cert.pem
SSL_CERT_DIR
SSL_CERT_DIR
SSL_CERT_FILE
SSL_CERT_FILE
Basis Type: %s
Basis Type: %s
Field Type: %s
Field Type: %s
ASN1 OID: %s
ASN1 OID: %s
%s %s%lu (%s0x%lx)
%s %s%lu (%s0x%lx)
%lu:%s:%s:%d:%s
%lu:%s:%s:%d:%s
CONF_def part of OpenSSL 1.0.0d 8 Feb 2011
CONF_def part of OpenSSL 1.0.0d 8 Feb 2011
[[%s]]
[[%s]]
[%s] %s=%s
[%s] %s=%s
crlUrl
crlUrl
certStatus
certStatus
certId
certId
OCSP_CERTSTATUS
OCSP_CERTSTATUS
value.unknown
value.unknown
value.revoked
value.revoked
value.good
value.good
value.byKey
value.byKey
value.byName
value.byName
reqCert
reqCert
OCSP_CERTID
OCSP_CERTID
issuerKeyHash
issuerKeyHash
certs
certs
d.receiptList
d.receiptList
d.allOrFirstTier
d.allOrFirstTier
d.compressedData
d.compressedData
d.authenticatedData
d.authenticatedData
d.encryptedData
d.encryptedData
d.digestedData
d.digestedData
d.envelopedData
d.envelopedData
d.signedData
d.signedData
d.ori
d.ori
d.pwri
d.pwri
d.kekri
d.kekri
d.kari
d.kari
d.ktri
d.ktri
CMS_PasswordRecipientInfo
CMS_PasswordRecipientInfo
keyDerivationAlgorithm
keyDerivationAlgorithm
keyIdentifier
keyIdentifier
CMS_KeyAgreeRecipientInfo
CMS_KeyAgreeRecipientInfo
recipientEncryptedKeys
recipientEncryptedKeys
CMS_OriginatorIdentifierOrKey
CMS_OriginatorIdentifierOrKey
d.originatorKey
d.originatorKey
CMS_OriginatorPublicKey
CMS_OriginatorPublicKey
CMS_RecipientEncryptedKey
CMS_RecipientEncryptedKey
CMS_KeyAgreeRecipientIdentifier
CMS_KeyAgreeRecipientIdentifier
d.rKeyId
d.rKeyId
CMS_RecipientKeyIdentifier
CMS_RecipientKeyIdentifier
CMS_OtherKeyAttribute
CMS_OtherKeyAttribute
keyAttr
keyAttr
keyAttrId
keyAttrId
CMS_KeyTransRecipientInfo
CMS_KeyTransRecipientInfo
encryptedKey
encryptedKey
keyEncryptionAlgorithm
keyEncryptionAlgorithm
certificates
certificates
d.crl
d.crl
d.subjectKeyIdentifier
d.subjectKeyIdentifier
d.issuerAndSerialNumber
d.issuerAndSerialNumber
CMS_CertificateChoices
CMS_CertificateChoices
d.v2AttrCert
d.v2AttrCert
d.v1AttrCert
d.v1AttrCert
d.extendedCertificate
d.extendedCertificate
d.certificate
d.certificate
CMS_OtherCertificateFormat
CMS_OtherCertificateFormat
otherCert
otherCert
otherCertFormat
otherCertFormat
%s.dll
%s.dll
PEM part of OpenSSL 1.0.0d 8 Feb 2011
PEM part of OpenSSL 1.0.0d 8 Feb 2011
phrase is too short, needs to be at least %d chars
phrase is too short, needs to be at least %d chars
Enter PEM pass phrase:
Enter PEM pass phrase:
TRUSTED CERTIFICATE
TRUSTED CERTIFICATE
CERTIFICATE REQUEST
CERTIFICATE REQUEST
NEW CERTIFICATE REQUEST
NEW CERTIFICATE REQUEST
CERTIFICATE
CERTIFICATE
X509 CERTIFICATE
X509 CERTIFICATE
PRIVATE KEY
PRIVATE KEY
ENCRYPTED PRIVATE KEY
ENCRYPTED PRIVATE KEY
ANY PRIVATE KEY
ANY PRIVATE KEY
.\crypto\evp\evp_key.c
.\crypto\evp\evp_key.c
nkey
nkey
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
Verifying - %s
Verifying - %s
OpenSSL 1.0.0d 8 Feb 2011
OpenSSL 1.0.0d 8 Feb 2011
%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s
%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s
EXPORT56
EXPORT56
EXPORT40
EXPORT40
EXPORT
EXPORT
.\ssl\ssl_cert.c
.\ssl\ssl_cert.c
SSLv3 part of OpenSSL 1.0.0d 8 Feb 2011
SSLv3 part of OpenSSL 1.0.0d 8 Feb 2011
TLSv1 part of OpenSSL 1.0.0d 8 Feb 2011
TLSv1 part of OpenSSL 1.0.0d 8 Feb 2011
SSLv2 part of OpenSSL 1.0.0d 8 Feb 2011
SSLv2 part of OpenSSL 1.0.0d 8 Feb 2011
s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)
s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)
wrong number of key bits
wrong number of key bits
unsupported status type
unsupported status type
unsupported ssl version
unsupported ssl version
unsupported protocol
unsupported protocol
unsupported elliptic curve
unsupported elliptic curve
unsupported digest type
unsupported digest type
unsupported compression algorithm
unsupported compression algorithm
unsupported cipher
unsupported cipher
unknown pkey type
unknown pkey type
unknown key exchange type
unknown key exchange type
unknown certificate type
unknown certificate type
unable to find public key parameters
unable to find public key parameters
unable to extract public key
unable to extract public key
unable to decode ecdh certs
unable to decode ecdh certs
unable to decode dh certs
unable to decode dh certs
tried to use unsupported cipher
tried to use unsupported cipher
tls peer did not respond with certificate list
tls peer did not respond with certificate list
tls client cert req with anon cipher
tls client cert req with anon cipher
tlsv1 unsupported extension
tlsv1 unsupported extension
tlsv1 certificate unobtainable
tlsv1 certificate unobtainable
tlsv1 bad certificate status response
tlsv1 bad certificate status response
tlsv1 bad certificate hash value
tlsv1 bad certificate hash value
tlsv1 alert export restriction
tlsv1 alert export restriction
sslv3 alert unsupported certificate
sslv3 alert unsupported certificate
sslv3 alert no certificate
sslv3 alert no certificate
sslv3 alert certificate unknown
sslv3 alert certificate unknown
sslv3 alert certificate revoked
sslv3 alert certificate revoked
sslv3 alert certificate expired
sslv3 alert certificate expired
sslv3 alert bad certificate
sslv3 alert bad certificate
signature for non signing certificate
signature for non signing certificate
reuse cert type not zero
reuse cert type not zero
reuse cert length not zero
reuse cert length not zero
public key not rsa
public key not rsa
public key is not rsa
public key is not rsa
public key encrypt error
public key encrypt error
peer error unsupported certificate type
peer error unsupported certificate type
peer error no certificate
peer error no certificate
peer error certificate
peer error certificate
peer did not return a certificate
peer did not return a certificate
null ssl method passed
null ssl method passed
no publickey
no publickey
no private key assigned
no private key assigned
no privatekey
no privatekey
Peer haven't sent GOST certificate, required for selected ciphersuite
Peer haven't sent GOST certificate, required for selected ciphersuite
no client cert received
no client cert received
no client cert method
no client cert method
no ciphers passed
no ciphers passed
no certificate specified
no certificate specified
no certificate set
no certificate set
no certificate returned
no certificate returned
no certificate assigned
no certificate assigned
no certificates returned
no certificates returned
missing tmp rsa pkey
missing tmp rsa pkey
missing tmp rsa key
missing tmp rsa key
missing tmp ecdh key
missing tmp ecdh key
missing tmp dh key
missing tmp dh key
missing rsa signing cert
missing rsa signing cert
missing rsa encrypting cert
missing rsa encrypting cert
missing rsa certificate
missing rsa certificate
missing export tmp rsa key
missing export tmp rsa key
missing export tmp dh key
missing export tmp dh key
missing dsa signing cert
missing dsa signing cert
missing dh rsa cert
missing dh rsa cert
missing dh key
missing dh key
missing dh dsa cert
missing dh dsa cert
krb5 server rd_req (keytab perms?)
krb5 server rd_req (keytab perms?)
key arg too long
key arg too long
invalid ticket keys length
invalid ticket keys length
http request
http request
https proxy request
https proxy request
error generating tmp rsa key
error generating tmp rsa key
ecc cert should have sha1 signature
ecc cert should have sha1 signature
ecc cert should have rsa signature
ecc cert should have rsa signature
ecc cert not for signing
ecc cert not for signing
ecc cert not for key agreement
ecc cert not for key agreement
cert length mismatch
cert length mismatch
certificate verify failed
certificate verify failed
bad ecc cert
bad ecc cert
bad dh pub key length
bad dh pub key length
TLS1_SETUP_KEY_BLOCK
TLS1_SETUP_KEY_BLOCK
tls1_cert_verify_mac
tls1_cert_verify_mac
SSL_VERIFY_CERT_CHAIN
SSL_VERIFY_CERT_CHAIN
SSL_use_RSAPrivateKey_file
SSL_use_RSAPrivateKey_file
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey
SSL_use_PrivateKey_file
SSL_use_PrivateKey_file
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey
SSL_use_PrivateKey
SSL_use_certificate_file
SSL_use_certificate_file
SSL_use_certificate_ASN1
SSL_use_certificate_ASN1
SSL_use_certificate
SSL_use_certificate
SSL_SET_PKEY
SSL_SET_PKEY
SSL_SET_CERT
SSL_SET_CERT
SSL_SESS_CERT_NEW
SSL_SESS_CERT_NEW
SSL_GET_SIGN_PKEY
SSL_GET_SIGN_PKEY
SSL_GET_SERVER_SEND_CERT
SSL_GET_SERVER_SEND_CERT
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey
SSL_CTX_use_certificate_file
SSL_CTX_use_certificate_file
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate
SSL_CTX_use_certificate
SSL_CTX_set_client_cert_engine
SSL_CTX_set_client_cert_engine
SSL_CTX_check_private_key
SSL_CTX_check_private_key
SSL_CHECK_SRVR_ECC_CERT_AND_ALG
SSL_CHECK_SRVR_ECC_CERT_AND_ALG
SSL_check_private_key
SSL_check_private_key
SSL_CERT_NEW
SSL_CERT_NEW
SSL_CERT_INSTANTIATE
SSL_CERT_INSTANTIATE
SSL_CERT_INST
SSL_CERT_INST
SSL_CERT_DUP
SSL_CERT_DUP
SSL_add_file_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_add_dir_cert_subjects_to_stack
SSL_add_dir_cert_subjects_to_stack
SSL3_SETUP_KEY_BLOCK
SSL3_SETUP_KEY_BLOCK
SSL3_SEND_SERVER_KEY_EXCHANGE
SSL3_SEND_SERVER_KEY_EXCHANGE
SSL3_SEND_SERVER_CERTIFICATE
SSL3_SEND_SERVER_CERTIFICATE
SSL3_SEND_CLIENT_KEY_EXCHANGE
SSL3_SEND_CLIENT_KEY_EXCHANGE
SSL3_SEND_CLIENT_CERTIFICATE
SSL3_SEND_CLIENT_CERTIFICATE
SSL3_SEND_CERTIFICATE_REQUEST
SSL3_SEND_CERTIFICATE_REQUEST
SSL3_OUTPUT_CERT_CHAIN
SSL3_OUTPUT_CERT_CHAIN
SSL3_GET_SERVER_CERTIFICATE
SSL3_GET_SERVER_CERTIFICATE
SSL3_GET_KEY_EXCHANGE
SSL3_GET_KEY_EXCHANGE
SSL3_GET_CLIENT_KEY_EXCHANGE
SSL3_GET_CLIENT_KEY_EXCHANGE
SSL3_GET_CLIENT_CERTIFICATE
SSL3_GET_CLIENT_CERTIFICATE
SSL3_GET_CERT_VERIFY
SSL3_GET_CERT_VERIFY
SSL3_GET_CERT_STATUS
SSL3_GET_CERT_STATUS
SSL3_GET_CERTIFICATE_REQUEST
SSL3_GET_CERTIFICATE_REQUEST
SSL3_GENERATE_KEY_BLOCK
SSL3_GENERATE_KEY_BLOCK
SSL3_CHECK_CERT_AND_ALGORITHM
SSL3_CHECK_CERT_AND_ALGORITHM
SSL3_ADD_CERT_TO_BUF
SSL3_ADD_CERT_TO_BUF
SSL2_SET_CERTIFICATE
SSL2_SET_CERTIFICATE
SSL2_GENERATE_KEY_MATERIAL
SSL2_GENERATE_KEY_MATERIAL
REQUEST_CERTIFICATE
REQUEST_CERTIFICATE
GET_CLIENT_MASTER_KEY
GET_CLIENT_MASTER_KEY
DTLS1_SEND_SERVER_KEY_EXCHANGE
DTLS1_SEND_SERVER_KEY_EXCHANGE
DTLS1_SEND_SERVER_CERTIFICATE
DTLS1_SEND_SERVER_CERTIFICATE
DTLS1_SEND_CLIENT_KEY_EXCHANGE
DTLS1_SEND_CLIENT_KEY_EXCHANGE
DTLS1_SEND_CLIENT_CERTIFICATE
DTLS1_SEND_CLIENT_CERTIFICATE
DTLS1_SEND_CERTIFICATE_REQUEST
DTLS1_SEND_CERTIFICATE_REQUEST
DTLS1_OUTPUT_CERT_CHAIN
DTLS1_OUTPUT_CERT_CHAIN
DTLS1_ADD_CERT_TO_BUF
DTLS1_ADD_CERT_TO_BUF
CLIENT_MASTER_KEY
CLIENT_MASTER_KEY
CLIENT_CERTIFICATE
CLIENT_CERTIFICATE
key expansion
key expansion
client write key
client write key
server write key
server write key
c->iv_len session->key_arg)
c->iv_len session->key_arg)
s->s2->key_material_length s2->key_material
s->s2->key_material_length s2->key_material
Corrupt JPEG data: found marker 0xx instead of RST%d
Corrupt JPEG data: found marker 0xx instead of RST%d
Warning: unknown JFIF revision number %d.d
Warning: unknown JFIF revision number %d.d
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Inconsistent progression sequence for component %d coefficient %d
Inconsistent progression sequence for component %d coefficient %d
Unknown Adobe color transform code %d
Unknown Adobe color transform code %d
Obtained XMS handle %u
Obtained XMS handle %u
Freed XMS handle %u
Freed XMS handle %u
Unrecognized component IDs %d %d %d, assuming YCbCr
Unrecognized component IDs %d %d %d, assuming YCbCr
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
Opened temporary file %s
Opened temporary file %s
Closed temporary file %s
Closed temporary file %s
Ss=%d, Se=%d, Ah=%d, Al=%d
Ss=%d, Se=%d, Ah=%d, Al=%d
Component %d: dc=%d ac=%d
Component %d: dc=%d ac=%d
Start Of Scan: %d components
Start Of Scan: %d components
Component %d: %dhx%dv q=%d
Component %d: %dhx%dv q=%d
Start Of Frame 0xx: width=%u, height=%u, components=%d
Start Of Frame 0xx: width=%u, height=%u, components=%d
Smoothing not supported with nonstandard sampling ratios
Smoothing not supported with nonstandard sampling ratios
RST%d
RST%d
At marker 0xx, recovery action %d
At marker 0xx, recovery action %d
Selected %d colors for quantization
Selected %d colors for quantization
Quantizing to %d colors
Quantizing to %d colors
Quantizing to %d = %d*%d*%d colors
Quantizing to %d = %d*%d*%d colors
%4u %4u %4u %4u %4u %4u %4u %4u
%4u %4u %4u %4u %4u %4u %4u %4u
Unexpected marker 0xx
Unexpected marker 0xx
Miscellaneous marker 0xx, length %u
Miscellaneous marker 0xx, length %u
with %d x %d thumbnail image
with %d x %d thumbnail image
JFIF extension marker: type 0xx, length %u
JFIF extension marker: type 0xx, length %u
Warning: thumbnail image size does not match data length %u
Warning: thumbnail image size does not match data length %u
JFIF APP0 marker: version %d.d, density %dx%d %d
JFIF APP0 marker: version %d.d, density %dx%d %d
= = = = = = = =
= = = = = = = =
Obtained EMS handle %u
Obtained EMS handle %u
Freed EMS handle %u
Freed EMS handle %u
Define Restart Interval %u
Define Restart Interval %u
Define Quantization Table %d precision %d
Define Quantization Table %d precision %d
Define Huffman Table 0xx
Define Huffman Table 0xx
Define Arithmetic Table 0xx: 0xx
Define Arithmetic Table 0xx: 0xx
Unknown APP14 marker (not Adobe), length %u
Unknown APP14 marker (not Adobe), length %u
Unknown APP0 marker (not JFIF), length %u
Unknown APP0 marker (not JFIF), length %u
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Unsupported marker type 0xx
Unsupported marker type 0xx
Failed to create temporary file %s
Failed to create temporary file %s
Unsupported JPEG process: SOF type 0xx
Unsupported JPEG process: SOF type 0xx
Cannot quantize to more than %d colors
Cannot quantize to more than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize more than %d color components
Cannot quantize more than %d color components
Insufficient memory (case %d)
Insufficient memory (case %d)
Not a JPEG file: starts with 0xx 0xx
Not a JPEG file: starts with 0xx 0xx
Quantization table 0xx was not defined
Quantization table 0xx was not defined
Huffman table 0xx was not defined
Huffman table 0xx was not defined
Backing store not supported
Backing store not supported
Cannot transcode due to multiple use of quantization table %d
Cannot transcode due to multiple use of quantization table %d
Maximum supported image dimension is %u pixels
Maximum supported image dimension is %u pixels
Empty JPEG image (DNL not supported)
Empty JPEG image (DNL not supported)
Bogus DQT index %d
Bogus DQT index %d
Bogus DHT index %d
Bogus DHT index %d
Bogus DAC value 0x%x
Bogus DAC value 0x%x
Bogus DAC index %d
Bogus DAC index %d
Unsupported color conversion request
Unsupported color conversion request
Too many color components: %d, max %d
Too many color components: %d, max %d
Buffer passed to JPEG library is too small
Buffer passed to JPEG library is too small
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
Improper call to JPEG library in state %d
Improper call to JPEG library in state %d
Invalid scan script at entry %d
Invalid scan script at entry %d
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Unsupported JPEG data precision %d
Unsupported JPEG data precision %d
Invalid memory pool code %d
Invalid memory pool code %d
Wrong JPEG library version: library is %d, caller expects %d
Wrong JPEG library version: library is %d, caller expects %d
IDCT output block size %d not supported
IDCT output block size %d not supported
Invalid component ID %d in SOS
Invalid component ID %d in SOS
Bogus message code %d
Bogus message code %d
;Warning: highpass filter disabled. highpass frequency too small
;Warning: highpass filter disabled. highpass frequency too small
hXXp://lame.sf.net
hXXp://lame.sf.net
3.99.5
3.99.5
Opera
Opera
?INTERNAL ERROR IN VBR NEW CODE, please send bug report
?INTERNAL ERROR IN VBR NEW CODE, please send bug report
@INTERNAL ERROR IN VBR NEW CODE (986), please send bug report
@INTERNAL ERROR IN VBR NEW CODE (986), please send bug report
INTERNAL ERROR IN VBR NEW CODE (1313), please send bug report
INTERNAL ERROR IN VBR NEW CODE (1313), please send bug report
maxbits=%d usedbits=%d
maxbits=%d usedbits=%d
hip: invalid layer %d
hip: invalid layer %d
hip: error audio data exceeds framesize by %d bytes
hip: error audio data exceeds framesize by %d bytes
hip: bitstream problem, resyncing skipping %d bytes...
hip: bitstream problem, resyncing skipping %d bytes...
Sorry, layer %d not supported
Sorry, layer %d not supported
hip: Can't rewind stream by %d bits!
hip: Can't rewind stream by %d bits!
hip: Bogus region length (%d)
hip: Bogus region length (%d)
ADVAPI32.dll
ADVAPI32.dll
F%D,3
F%D,3
QVisual C CRT: Not enough memory to complete call to strerror.
QVisual C CRT: Not enough memory to complete call to strerror.
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
%S#[k
%S#[k
?#%X.y
?#%X.y
.\crypto\engine\eng_pkey.c
.\crypto\engine\eng_pkey.c
RSA PRIVATE KEY
RSA PRIVATE KEY
DSA PRIVATE KEY
DSA PRIVATE KEY
EC PRIVATE KEY
EC PRIVATE KEY
Load certs from files in a directory
Load certs from files in a directory
%s%clx.%s%d
%s%clx.%s%d
unsupported type
unsupported type
unsupported recpientinfo type
unsupported recpientinfo type
unsupported recipient type
unsupported recipient type
unsupported kek algorithm
unsupported kek algorithm
unsupported content type
unsupported content type
signer certificate not found
signer certificate not found
private key does not match certificate
private key does not match certificate
no public key
no public key
no private key
no private key
no msgsigdigest
no msgsigdigest
no key or cert
no key or cert
no key
no key
not supported for this key type
not supported for this key type
not key transport
not key transport
msgsigdigest wrong length
msgsigdigest wrong length
msgsigdigest verification failure
msgsigdigest verification failure
msgsigdigest error
msgsigdigest error
invalid key length
invalid key length
invalid encrypted key length
invalid encrypted key length
error setting key
error setting key
error getting public key
error getting public key
certificate verify error
certificate verify error
certificate has no keyid
certificate has no keyid
certificate already present
certificate already present
CMS_SIGNERINFO_VERIFY_CERT
CMS_SIGNERINFO_VERIFY_CERT
CMS_RecipientInfo_set0_pkey
CMS_RecipientInfo_set0_pkey
CMS_RecipientInfo_set0_key
CMS_RecipientInfo_set0_key
CMS_RecipientInfo_ktri_cert_cmp
CMS_RecipientInfo_ktri_cert_cmp
cms_msgSigDigest_add1
cms_msgSigDigest_add1
CMS_GET0_CERTIFICATE_CHOICES
CMS_GET0_CERTIFICATE_CHOICES
CMS_EncryptedData_set1_key
CMS_EncryptedData_set1_key
CMS_decrypt_set1_pkey
CMS_decrypt_set1_pkey
CMS_decrypt_set1_key
CMS_decrypt_set1_key
CMS_add1_recipient_cert
CMS_add1_recipient_cert
CMS_add0_recipient_key
CMS_add0_recipient_key
CMS_add0_cert
CMS_add0_cert
unsupported requestorname type
unsupported requestorname type
no certificates in chain
no certificates in chain
error parsing url
error parsing url
PARSE_HTTP_LINE1
PARSE_HTTP_LINE1
OCSP_parse_url
OCSP_parse_url
OCSP_cert_id_new
OCSP_cert_id_new
unimplemented public key method
unimplemented public key method
invalid cmd number
invalid cmd number
invalid cmd name
invalid cmd name
failed loading public key
failed loading public key
failed loading private key
failed loading private key
cmd not executable
cmd not executable
ENGINE_UNLOAD_KEY
ENGINE_UNLOAD_KEY
ENGINE_load_ssl_client_cert
ENGINE_load_ssl_client_cert
ENGINE_load_public_key
ENGINE_load_public_key
ENGINE_load_private_key
ENGINE_load_private_key
ENGINE_get_pkey_meth
ENGINE_get_pkey_meth
ENGINE_get_pkey_asn1_meth
ENGINE_get_pkey_asn1_meth
ENGINE_ctrl_cmd_string
ENGINE_ctrl_cmd_string
ENGINE_ctrl_cmd
ENGINE_ctrl_cmd
ENGINE_cmd_is_executable
ENGINE_cmd_is_executable
unsupported version
unsupported version
unsupported md algorithm
unsupported md algorithm
invalid signer certificate purpose
invalid signer certificate purpose
ess signing certificate error
ess signing certificate error
ess add signing cert error
ess add signing cert error
TS_VERIFY_CERT
TS_VERIFY_CERT
TS_TST_INFO_set_msg_imprint
TS_TST_INFO_set_msg_imprint
TS_RESP_CTX_set_signer_cert
TS_RESP_CTX_set_signer_cert
TS_RESP_CTX_set_certs
TS_RESP_CTX_set_certs
TS_REQ_set_msg_imprint
TS_REQ_set_msg_imprint
TS_MSG_IMPRINT_set_algo
TS_MSG_IMPRINT_set_algo
TS_CHECK_SIGNING_CERTS
TS_CHECK_SIGNING_CERTS
ESS_SIGNING_CERT_NEW_INIT
ESS_SIGNING_CERT_NEW_INIT
ESS_CERT_ID_NEW_INIT
ESS_CERT_ID_NEW_INIT
ESS_ADD_SIGNING_CERT
ESS_ADD_SIGNING_CERT
functionality not supported
functionality not supported
WIN32_JOINER
WIN32_JOINER
unsupported pkcs12 mode
unsupported pkcs12 mode
key gen error
key gen error
PKCS8_add_keyusage
PKCS8_add_keyusage
PKCS12_PBE_keyivgen
PKCS12_PBE_keyivgen
PKCS12_newpass
PKCS12_newpass
PKCS12_MAKE_SHKEYBAG
PKCS12_MAKE_SHKEYBAG
PKCS12_MAKE_KEYBAG
PKCS12_MAKE_KEYBAG
PKCS12_key_gen_uni
PKCS12_key_gen_uni
PKCS12_key_gen_asc
PKCS12_key_gen_asc
PKCS12_add_localkeyid
PKCS12_add_localkeyid
unsupported option
unsupported option
unable to get issuer keyid
unable to get issuer keyid
policy syntax not currently supported
policy syntax not currently supported
operation not defined
operation not defined
no proxy cert policy language defined
no proxy cert policy language defined
no issuer certificate
no issuer certificate
extension setting not supported
extension setting not supported
V2I_EXTENDED_KEY_USAGE
V2I_EXTENDED_KEY_USAGE
V2I_AUTHORITY_KEYID
V2I_AUTHORITY_KEYID
S2I_SKEY_ID
S2I_SKEY_ID
S2I_ASN1_SKEY_ID
S2I_ASN1_SKEY_ID
R2I_CERTPOL
R2I_CERTPOL
unsupported cipher type
unsupported cipher type
unknown operation
unknown operation
unable to find certificate
unable to find certificate
signing not supported for this key type
signing not supported for this key type
operation not supported on this type
operation not supported on this type
no recipient matches key
no recipient matches key
no recipient matches certificate
no recipient matches certificate
encryption not supported for this key type
encryption not supported for this key type
decrypted key is wrong length
decrypted key is wrong length
PKCS7_add_certificate
PKCS7_add_certificate
unsupported method
unsupported method
no port specified
no port specified
no port defined
no port defined
no accept port specified
no accept port specified
broken pipe
broken pipe
BIO_get_port
BIO_get_port
ECDH_compute_key
ECDH_compute_key
data too large for key size
data too large for key size
unsupported field
unsupported field
passed null parameter
passed null parameter
not a supported NIST prime
not a supported NIST prime
missing private key
missing private key
keys not set
keys not set
invalid private key
invalid private key
PKEY_EC_SIGN
PKEY_EC_SIGN
PKEY_EC_PARAMGEN
PKEY_EC_PARAMGEN
PKEY_EC_KEYGEN
PKEY_EC_KEYGEN
PKEY_EC_DERIVE
PKEY_EC_DERIVE
PKEY_EC_CTRL_STR
PKEY_EC_CTRL_STR
PKEY_EC_CTRL
PKEY_EC_CTRL
o2i_ECPublicKey
o2i_ECPublicKey
i2o_ECPublicKey
i2o_ECPublicKey
i2d_ECPrivateKey
i2d_ECPrivateKey
EC_KEY_print_fp
EC_KEY_print_fp
EC_KEY_print
EC_KEY_print
EC_KEY_new
EC_KEY_new
EC_KEY_generate_key
EC_KEY_generate_key
EC_KEY_copy
EC_KEY_copy
EC_KEY_check_key
EC_KEY_check_key
ECKEY_TYPE2PARAM
ECKEY_TYPE2PARAM
ECKEY_PUB_ENCODE
ECKEY_PUB_ENCODE
ECKEY_PUB_DECODE
ECKEY_PUB_DECODE
ECKEY_PRIV_ENCODE
ECKEY_PRIV_ENCODE
ECKEY_PRIV_DECODE
ECKEY_PRIV_DECODE
ECKEY_PARAM_DECODE
ECKEY_PARAM_DECODE
ECKEY_PARAM2TYPE
ECKEY_PARAM2TYPE
DO_EC_KEY_PRINT
DO_EC_KEY_PRINT
d2i_ECPrivateKey
d2i_ECPrivateKey
zlib not supported
zlib not supported
wrong public key type
wrong public key type
unsupported public key type
unsupported public key type
unsupported encryption algorithm
unsupported encryption algorithm
unsupported any defined by type
unsupported any defined by type
unknown public key type
unknown public key type
unable to decode rsa private key
unable to decode rsa private key
unable to decode rsa key
unable to decode rsa key
streaming not supported
streaming not supported
private key header missing
private key header missing
digest and key type not supported
digest and key type not supported
bad password read
bad password read
X509_PKEY_new
X509_PKEY_new
i2d_RSA_PUBKEY
i2d_RSA_PUBKEY
i2d_PublicKey
i2d_PublicKey
i2d_PrivateKey
i2d_PrivateKey
i2d_EC_PUBKEY
i2d_EC_PUBKEY
i2d_DSA_PUBKEY
i2d_DSA_PUBKEY
d2i_X509_PKEY
d2i_X509_PKEY
d2i_PublicKey
d2i_PublicKey
d2i_PrivateKey
d2i_PrivateKey
d2i_AutoPrivateKey
d2i_AutoPrivateKey
unsupported algorithm
unsupported algorithm
unknown key type
unknown key type
unable to get certs public key
unable to get certs public key
public key encode error
public key encode error
public key decode error
public key decode error
no cert set for us to verify
no cert set for us to verify
method not supported
method not supported
loading cert dir
loading cert dir
key values mismatch
key values mismatch
key type mismatch
key type mismatch
cert already in hash table
cert already in hash table
cant check dh key
cant check dh key
X509_verify_cert
X509_verify_cert
X509_STORE_add_cert
X509_STORE_add_cert
X509_REQ_check_private_key
X509_REQ_check_private_key
X509_PUBKEY_set
X509_PUBKEY_set
X509_PUBKEY_get
X509_PUBKEY_get
X509_load_cert_file
X509_load_cert_file
X509_load_cert_crl_file
X509_load_cert_crl_file
X509_get_pubkey_parameters
X509_get_pubkey_parameters
X509_check_private_key
X509_check_private_key
GET_CERT_BY_SUBJECT
GET_CERT_BY_SUBJECT
ADD_CERT_DIR
ADD_CERT_DIR
PKEY_DSA_KEYGEN
PKEY_DSA_KEYGEN
PKEY_DSA_CTRL
PKEY_DSA_CTRL
unsupported key components
unsupported key components
unsupported encryption
unsupported encryption
read key
read key
public key no rsa
public key no rsa
problems getting password
problems getting password
keyblob too short
keyblob too short
keyblob header parse error
keyblob header parse error
expecting public key blob
expecting public key blob
expecting private key blob
expecting private key blob
error converting private key
error converting private key
PEM_WRITE_PRIVATEKEY
PEM_WRITE_PRIVATEKEY
PEM_READ_PRIVATEKEY
PEM_READ_PRIVATEKEY
PEM_READ_BIO_PRIVATEKEY
PEM_READ_BIO_PRIVATEKEY
PEM_PK8PKEY
PEM_PK8PKEY
PEM_F_PEM_WRITE_PKCS8PRIVATEKEY
PEM_F_PEM_WRITE_PKCS8PRIVATEKEY
DO_PK8PKEY_FP
DO_PK8PKEY_FP
DO_PK8PKEY
DO_PK8PKEY
d2i_PKCS8PrivateKey_fp
d2i_PKCS8PrivateKey_fp
d2i_PKCS8PrivateKey_bio
d2i_PKCS8PrivateKey_bio
unsupported salt type
unsupported salt type
unsupported private key algorithm
unsupported private key algorithm
unsupported prf
unsupported prf
unsupported key size
unsupported key size
unsupported key derivation function
unsupported key derivation function
unsupported keylength
unsupported keylength
unsuported number of rounds
unsuported number of rounds
private key encode error
private key encode error
private key decode error
private key decode error
operaton not initialized
operaton not initialized
operation not supported for this keytype
operation not supported for this keytype
no operation set
no operation set
no key set
no key set
keygen failure
keygen failure
invalid operation
invalid operation
expecting a ec key
expecting a ec key
expecting a ecdsa key
expecting a ecdsa key
expecting a dsa key
expecting a dsa key
expecting a dh key
expecting a dh key
expecting an rsa key
expecting an rsa key
different key types
different key types
ctrl operation not implemented
ctrl operation not implemented
command not supported
command not supported
camellia key setup failed
camellia key setup failed
bn pubkey error
bn pubkey error
bad key length
bad key length
aes key setup failed
aes key setup failed
PKEY_SET_TYPE
PKEY_SET_TYPE
PKCS5_v2_PBE_keyivgen
PKCS5_v2_PBE_keyivgen
PKCS5_PBE_keyivgen
PKCS5_PBE_keyivgen
EVP_PKEY_verify_recover_init
EVP_PKEY_verify_recover_init
EVP_PKEY_verify_recover
EVP_PKEY_verify_recover
EVP_PKEY_verify_init
EVP_PKEY_verify_init
EVP_PKEY_verify
EVP_PKEY_verify
EVP_PKEY_sign_init
EVP_PKEY_sign_init
EVP_PKEY_sign
EVP_PKEY_sign
EVP_PKEY_paramgen_init
EVP_PKEY_paramgen_init
EVP_PKEY_paramgen
EVP_PKEY_paramgen
EVP_PKEY_new
EVP_PKEY_new
EVP_PKEY_keygen_init
EVP_PKEY_keygen_init
EVP_PKEY_keygen
EVP_PKEY_keygen
EVP_PKEY_get1_RSA
EVP_PKEY_get1_RSA
EVP_PKEY_get1_EC_KEY
EVP_PKEY_get1_EC_KEY
EVP_PKEY_GET1_ECDSA
EVP_PKEY_GET1_ECDSA
EVP_PKEY_get1_DSA
EVP_PKEY_get1_DSA
EVP_PKEY_get1_DH
EVP_PKEY_get1_DH
EVP_PKEY_encrypt_old
EVP_PKEY_encrypt_old
EVP_PKEY_encrypt_init
EVP_PKEY_encrypt_init
EVP_PKEY_encrypt
EVP_PKEY_encrypt
EVP_PKEY_derive_set_peer
EVP_PKEY_derive_set_peer
EVP_PKEY_derive_init
EVP_PKEY_derive_init
EVP_PKEY_derive
EVP_PKEY_derive
EVP_PKEY_decrypt_old
EVP_PKEY_decrypt_old
EVP_PKEY_decrypt_init
EVP_PKEY_decrypt_init
EVP_PKEY_decrypt
EVP_PKEY_decrypt
EVP_PKEY_CTX_dup
EVP_PKEY_CTX_dup
EVP_PKEY_CTX_ctrl_str
EVP_PKEY_CTX_ctrl_str
EVP_PKEY_CTX_ctrl
EVP_PKEY_CTX_ctrl
EVP_PKEY_copy_parameters
EVP_PKEY_copy_parameters
EVP_PKEY2PKCS8_broken
EVP_PKEY2PKCS8_broken
EVP_PKCS82PKEY_BROKEN
EVP_PKCS82PKEY_BROKEN
EVP_PKCS82PKEY
EVP_PKCS82PKEY
EVP_CIPHER_CTX_set_key_length
EVP_CIPHER_CTX_set_key_length
ECKEY_PKEY2PKCS8
ECKEY_PKEY2PKCS8
ECDSA_PKEY2PKCS8
ECDSA_PKEY2PKCS8
DSA_PKEY2PKCS8
DSA_PKEY2PKCS8
DSAPKEY2PKCS8
DSAPKEY2PKCS8
D2I_PKEY
D2I_PKEY
CAMELLIA_INIT_KEY
CAMELLIA_INIT_KEY
AES_INIT_KEY
AES_INIT_KEY
invalid public key
invalid public key
PKEY_DH_KEYGEN
PKEY_DH_KEYGEN
PKEY_DH_DERIVE
PKEY_DH_DERIVE
GENERATE_KEY
GENERATE_KEY
COMPUTE_KEY
COMPUTE_KEY
rsa operations not supported
rsa operations not supported
key size too small
key size too small
invalid keybits
invalid keybits
illegal or unsupported padding mode
illegal or unsupported padding mode
digest too big for rsa key
digest too big for rsa key
data too small for key size
data too small for key size
RSA_generate_key
RSA_generate_key
RSA_check_key
RSA_check_key
RSA_BUILTIN_KEYGEN
RSA_BUILTIN_KEYGEN
PKEY_RSA_VERIFYRECOVER
PKEY_RSA_VERIFYRECOVER
PKEY_RSA_SIGN
PKEY_RSA_SIGN
PKEY_RSA_CTRL_STR
PKEY_RSA_CTRL_STR
PKEY_RSA_CTRL
PKEY_RSA_CTRL
.pp@0
.pp@0
aEÐ
aEÐ
(#EÚ
(#EÚ
ÚE
ÚE
RC2 part of OpenSSL 1.0.0d 8 Feb 2011
RC2 part of OpenSSL 1.0.0d 8 Feb 2011
IDEA part of OpenSSL 1.0.0d 8 Feb 2011
IDEA part of OpenSSL 1.0.0d 8 Feb 2011
libdes part of OpenSSL 1.0.0d 8 Feb 2011
libdes part of OpenSSL 1.0.0d 8 Feb 2011
DES part of OpenSSL 1.0.0d 8 Feb 2011
DES part of OpenSSL 1.0.0d 8 Feb 2011
NETSCAPE_CERT_SEQUENCE
NETSCAPE_CERT_SEQUENCE
.\crypto\asn1\x_pkey.c
.\crypto\asn1\x_pkey.c
RegDeleteKeyW
RegDeleteKeyW
RegCloseKey
RegCloseKey
RegCreateKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegEnumKeyExW
ReportEventA
ReportEventA
UrlIsW
UrlIsW
SHLWAPI.dll
SHLWAPI.dll
PSAPI.DLL
PSAPI.DLL
WS2_32.dll
WS2_32.dll
COMCTL32.dll
COMCTL32.dll
ShellExecuteW
ShellExecuteW
ShellExecuteExW
ShellExecuteExW
SHELL32.dll
SHELL32.dll
FtpPutFileW
FtpPutFileW
FtpCreateDirectoryW
FtpCreateDirectoryW
FtpRemoveDirectoryW
FtpRemoveDirectoryW
FtpDeleteFileW
FtpDeleteFileW
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryW
WININET.dll
WININET.dll
MPR.dll
MPR.dll
WINMM.dll
WINMM.dll
VERSION.dll
VERSION.dll
GetWindowsDirectoryW
GetWindowsDirectoryW
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
GetProcessHeap
GetProcessHeap
KERNEL32.dll
KERNEL32.dll
UnregisterHotKey
UnregisterHotKey
RegisterHotKey
RegisterHotKey
GetKeyNameTextW
GetKeyNameTextW
MapVirtualKeyW
MapVirtualKeyW
EnumWindows
EnumWindows
EnumChildWindows
EnumChildWindows
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExW
GetKeyState
GetKeyState
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
COMDLG32.dll
COMDLG32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
1
1
<:>
<:>
/
/
<:>
<:>
<:>
<:>
?<:>
?<:>
?<:>
?<:>
1
1
:
:
<:>
<:>
<.>
<.>
(
(
<.>
<.>
<:>
<:>
<:>
<:>
<:>
<:>
<:>
<:>
/
/
[
[
.?AVECSmtp@@
.?AVECSmtp@@
zcÁ
zcÁ
Jv.AKv
Jv.AKv
,i%f
,i%f
\cmd'
\cmd'
.GL#!
.GL#!
*%S_A
*%S_A
nÂzj
nÂzj
\StringFileInfo\lx\%s
\StringFileInfo\lx\%s
%Y-%m-%d_%H-%M-%S.mp3
%Y-%m-%d_%H-%M-%S.mp3
smtps.uol.com.br
smtps.uol.com.br
*@uol.com.br
*@uol.com.br
smtp.comcast.net
smtp.comcast.net
*@comcast.net
*@comcast.net
smtp.aol.com
smtp.aol.com
*@aol.com
*@aol.com
smtp.gawab.com
smtp.gawab.com
*@gawab.com
*@gawab.com
mail.messagingengine.com
mail.messagingengine.com
*@fastmail.fm
*@fastmail.fm
smtp.live.com
smtp.live.com
*@hotmail.com
*@hotmail.com
smtp.hotpop.com
smtp.hotpop.com
*@hotpop.com
*@hotpop.com
smtp.ig.com.br
smtp.ig.com.br
*@ig.com.br
*@ig.com.br
smtp.gmx.com
smtp.gmx.com
*@gmx.com;*@gmx.us
*@gmx.com;*@gmx.us
smtps.bol.com.br
smtps.bol.com.br
*@bol.com.br
*@bol.com.br
smtp.mail.yahoo.com
smtp.mail.yahoo.com
*@yahoo.com
*@yahoo.com
smtp.aim.com
smtp.aim.com
*@aim.com
*@aim.com
smtp.googlemail.com
smtp.googlemail.com
*@gmail.com;*@googlemail.com
*@gmail.com;*@googlemail.com
smtp.mail.yahoo.com.br
smtp.mail.yahoo.com.br
*@yahoo.com.br
*@yahoo.com.br
Shell32.dll
Shell32.dll
RICHED20.DLL
RICHED20.DLL
WAdvapi32.dll
WAdvapi32.dll
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_PERFORMANCE_DATA
HKEY_DYN_DATA
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
@uxtheme.dll
@uxtheme.dll
@(),;:\"[]
@(),;:\"[]
ASoftware\Microsoft\Windows\CurrentVersion\Run
ASoftware\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion
test234.txt
test234.txt
TEST816.txt
TEST816.txt
TEST816.txt/test234.txt
TEST816.txt/test234.txt
All Files (*.*)
All Files (*.*)
*.exe
*.exe
Viewer.exe
Viewer.exe
\TEST996.txt
\TEST996.txt
@USER32.DLL
@USER32.DLL
4.5.1
4.5.1
®key=
®key=
4.5.1
4.5.1
\Install.exe
\Install.exe
(*.exe)
(*.exe)
S.ICO
S.ICO
\WinInit.Ini
\WinInit.Ini
wininet.dll
wininet.dll
netmsg.dll
netmsg.dll
%Y-%m-%d_%H-%M-%S.jpg
%Y-%m-%d_%H-%M-%S.jpg
@hXXp://
@hXXp://
S%Y-%m-%d_%H-%M-%S
S%Y-%m-%d_%H-%M-%S
CWebcam_
CWebcam_
Keys_
Keys_
.html
.html
comctl32.dll
comctl32.dll
DNSAPI.DLL
DNSAPI.DLL
WTL_CmdBar_InternalAutoPopupMsg
WTL_CmdBar_InternalAutoPopupMsg
WTL_CmdBar_InternalGetBarMsg
WTL_CmdBar_InternalGetBarMsg
mscoree.dll
mscoree.dll
V*(%F@4 F7*
V*(%F@4 F7*
72.JA1'
72.JA1'
[,'&"?4-
[,'&"?4-
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe
22.exe_1804_rwx_01690000_00007000:
.MXh3
.MXh3
svchost.exe_816_rwx_66382000_00002000:
KfVJKf.JKf>
KfVJKf.JKf>
Bf*9`f*.Df
Bf*9`f*.Df