www.btcotomasyon.com/
301 Moved Permanently 152 B IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 65bf989a571dcd7f04573559af0900bb
8a92db74fafa8cf633eb940baeaf19760ef8c8e3
811be12c9990a4f5993ad5ae967a98991a3fe3c010e68113b26d05aaea8e5732
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:34 GMT
Content-Length: 152
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12505
Expires: Tue, 31 Jan 2023 15:08:59 GMT
Date: Tue, 31 Jan 2023 11:40:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14552
Expires: Tue, 31 Jan 2023 15:43:06 GMT
Date: Tue, 31 Jan 2023 11:40:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8913
Expires: Tue, 31 Jan 2023 14:09:07 GMT
Date: Tue, 31 Jan 2023 11:40:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 10:43:17 GMT
content-type: application/json
age: 3437
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: tmmk71+QBzcmyvVWLI6dP9VuAkMqbNgrBbSyBhfEm3yMIqnq3Gla5RYQuPk+E1KTWXbChZEbiow=
x-amz-request-id: TS9DFW0H25NR9J2N
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 10:51:08 GMT
age: 2966
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:40:34 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 10:41:42 GMT
age: 3532
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13211
Expires: Tue, 31 Jan 2023 15:20:45 GMT
Date: Tue, 31 Jan 2023 11:40:34 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: kshh6Nwq588PpMlUy906LQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zeT66a7DFlx/Zd9DXSC4fRRZQ/Y=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6375
Expires: Tue, 31 Jan 2023 13:26:51 GMT
Date: Tue, 31 Jan 2023 11:40:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6375
Expires: Tue, 31 Jan 2023 13:26:51 GMT
Date: Tue, 31 Jan 2023 11:40:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6375
Expires: Tue, 31 Jan 2023 13:26:51 GMT
Date: Tue, 31 Jan 2023 11:40:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2797bfd35b7ec24888de84be14f7f2ec
8e315ac5856967286eaa8769e081d827fb4ca39e
b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:50:52 GMT
age: 28184
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63486f2a937aa8fd013fc2c2d1b32f2d
e8868de34c2f79348c1edad764259eb70bebd7a6
fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L6MnX0h8Bn9-ufqI6yOzQAPhqc4SoJKySgzlm756NaiVrfJpnftIWQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 06:29:38 GMT
age: 18658
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a2d26da68a313cc65958fc2692351c2
798c3538f3147ca77d317676ddd1bf040bd0f93b
76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XYo_QvM8GWDyulOtUb5nVjS9PxOinaRJ3lYvCreeqd_9tHI5yv5xcQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:48:21 GMT
age: 49935
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cbc9f50b0a96fb69fa2e948aa3125413
e7f13a6e81263e73ac5777959d63b567f50848d5
2e3411687a31211dbf0aa732f8d93a3c5a4748afb264e695d36782700c8e8b5d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12906
x-amzn-requestid: a1b3b104-14dc-4cc9-a3fb-b2fcc8f7700c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiPRrGSOIAMF-5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d72c0a-6e5a348670f401e076a59286;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 02:31:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TqLNvyBKeFgNPTUSFH__8lKjIc22VLORy0pTdCvkHsmiS8WpEd1aMQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:32:23 GMT
age: 47293
etag: "e7f13a6e81263e73ac5777959d63b567f50848d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 00:33:02 GMT
age: 40054
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Gif_csWkacU59D_hnOrJpK6u2aPI8Ylf2JyQEJZ2RLNMCrXSmmMa9w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:56:35 GMT
age: 35041
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.btcotomasyon.com/
200 OK 30 kB IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (54680), with CRLF, LF line terminators
Hash ec283104599e1067ff3f3a4ab084a43c
e74f05a0f5b616340498d28e675e36dc9523d088
6962855a337010b96ba721cdb14384d061f46acd02c0267b44f81e943bc84dc1
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
server: Microsoft-IIS/10.0
link: <https://www.btcotomasyon.com/wp-json/>; rel="https://api.w.org/", <https://www.btcotomasyon.com/>; rel=shortlink
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 29671
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/gtranslate/gtranslate-style24.css
200 OK 366 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/gtranslate/gtranslate-style24.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
Hash 371399a84b25ebfaa59c52795b30259c
e74037543b7a1594126260ed9239d7b9b1c0ea3e
3a7443bbdcb3a0b57f14d26ab3c7321df30936a4fc26f6d2e794f85e41617c56
GET /web/wp-content/plugins/gtranslate/gtranslate-style24.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:43:00 GMT
accept-ranges: bytes
etag: "ec3d709d9958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 366
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/contact-form-7/includes/css/styles.css
200 OK 773 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/contact-form-7/includes/css/styles.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
Hash 90789a0a9671476203cfd11dcddb9a95
a9aae9a36fc1fcfd3506879edbf2132524371b90
4c91287310bed728cd791e9f43ce0eb3ed72e988790c29beb00169299c5227b4
GET /web/wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:07:03 GMT
accept-ranges: bytes
etag: "219fe6f99c58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 773
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/css/dist/block-library/style.min.css
200 OK 6.9 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/css/dist/block-library/style.min.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (25242), with no line terminators
Hash 2e730e7dc207d005c98f80b63227dd7f
0f5775a88b8fa1354491802da2d67834c9746708
648468ee7d70cc52d57a54de7b44d84d2e7df6251c4422c50ccce7caa5719871
GET /web/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:41:09 GMT
accept-ranges: bytes
etag: "8c7d7b5b9958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 6906
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/style.css
200 OK 253 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/style.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type Unicode text, UTF-8 (with BOM) text
Hash a5f5efcc63e6d4d91bdbfb3cee4e074c
828a3069321b1e4d3006088913547636313f4f8c
1201eb3decc88bbe26f5471ee1053353a8479ca2e458baef3d14a4666c6515a7
GET /web/wp-content/themes/btcotomasyon/style.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:43:16 GMT
accept-ranges: bytes
etag: "29ebf9a69958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 253
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/css/settings.css
200 OK 14 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/css/settings.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type Unicode text, UTF-8 text, with very long lines (5178)
Hash 403be1651e14c367e723776de068ad7e
7fb2b001109ac976d858639b85d1c1d239c5c14e
5f1fd0758ca3d5589c34341ff1e0a505dea392f29ec7c9c87e71d7a47dc990d2
GET /web/wp-content/plugins/revslider/public/assets/css/settings.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:11:15 GMT
accept-ranges: bytes
etag: "4065fa8f9d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 14201
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/base.css
200 OK 16 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/base.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (2051)
Hash 3b1db6942648878099a1bbfb8f60179c
6cf78b9ef0b982e452956af6196aa9799a5182ed
76b549db5f5d60e71aac7025aa5d57be2866e1cea602bb4af488f327ed888fca
GET /web/wp-content/themes/btcotomasyon/css/base.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:45:29 GMT
accept-ranges: bytes
etag: "c88da9f69958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 15954
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/layout.css
200 OK 35 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/layout.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (401)
Hash 8f3fa27d2a291e88bc2ef4fb96d1c3ad
02362dfa0c43d80e70a70f358d7a6bc850c2262a
c6e59b93be132ab923bfdf97dcea534f26f2e0ae9c4b2a0e074ea251014c95d3
GET /web/wp-content/themes/btcotomasyon/css/layout.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:45:29 GMT
accept-ranges: bytes
etag: "45dcb7f69958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 34752
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/ui/jquery.ui.all.css
200 OK 5.2 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/ui/jquery.ui.all.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (365)
Hash c72887ba294fc73568d369187ac0de28
eba023c22ab8463dbe625270c6e1b1242b9d5b5f
4142bbace0f5420667e643db6cfcf681890975b0ecf04cf00fcf0fe6b452f16c
GET /web/wp-content/themes/btcotomasyon/assets/ui/jquery.ui.all.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:08:40 GMT
accept-ranges: bytes
etag: "90b140339d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 5193
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/animations/animations.min.css
200 OK 9.8 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/animations/animations.min.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (58508), with no line terminators
Hash 2217098211a192beacc6759724d8a9f4
3e9ed16489f981f08cbaffb3458698d57425d769
c6c9e20e5141976328e1becc20a6e9a43020338b398a38c6c18384ccc0e8e95a
GET /web/wp-content/themes/btcotomasyon/assets/animations/animations.min.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:08:39 GMT
accept-ranges: bytes
etag: "eb29bb329d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 9837
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a5ff07b9b81cdf319f4a57d8d6dbbd6d
736ae15d0ed2068580d35a7cff8b33c0ec87af52
24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-144624572-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144624572-1
IP
File type ASCII text, with very long lines (1759)
Hash 7764136d136257bb39725c1c9c20a527
2318b5ce6a6af49d9bbb55f5b8ff6fd4addbd6ea
3d42c227db744192fdfc1148f2a47f8c3dc74d186ff184e8705e8dd2ff9210b3
GET /gtag/js?id=UA-144624572-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 31 Jan 2023 11:40:41 GMT
expires: Tue, 31 Jan 2023 11:40:41 GMT
cache-control: private, max-age=900
last-modified: Tue, 31 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44094
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/shortcodes.css
200 OK 41 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/shortcodes.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (404)
Hash 955a66b7b8a4dd9786d32ac2e36cdd19
4d9bb6ce908a91e09f007cdfd3188851defddd0e
afc869de3315d37c9c6a220369d947f0cc41e49f602fc8bf7acf848dc9d0eb2a
GET /web/wp-content/themes/btcotomasyon/css/shortcodes.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:45:30 GMT
accept-ranges: bytes
etag: "8117f1f69958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 41413
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/prettyPhoto/prettyPhoto.css
200 OK 4.8 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/prettyPhoto/prettyPhoto.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (402)
Hash d5ada21ef9e0155c42cd80123a0d893d
4232c864e3f1060e3cb0bae148b6f75610d6bb3b
1d0416f773e43ec50fdbdfb4071f8c205333ff29f406cb181b6605eac9d44916
GET /web/wp-content/themes/btcotomasyon/assets/prettyPhoto/prettyPhoto.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:08:39 GMT
accept-ranges: bytes
etag: "4c8a39339d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 4769
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/jplayer/css/jplayer.blue.monday.css
200 OK 3.3 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/jplayer/css/jplayer.blue.monday.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
Hash 2f3d9f44e759cac43777708570036368
15e0d5e56a93861886faefe97462afb9b31888c8
cd77e97761ac9349310e2afa90c750cd7ddd9dcc062d710759e30ce7e64f1cb4
GET /web/wp-content/themes/btcotomasyon/assets/jplayer/css/jplayer.blue.monday.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:11:38 GMT
accept-ranges: bytes
etag: "bf7bc89d9d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 3311
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/responsive.css
200 OK 18 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/responsive.css
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (612)
Hash f98084f48118ffb586ce1974a8eada8f
c20ecd7c447d0434097924969274368ae737d524
fc9294e1411e5968f8fd5bed5d130015c645815737c9260a3785bdcb3ac6a36d
GET /web/wp-content/themes/btcotomasyon/css/responsive.css HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:45:30 GMT
accept-ranges: bytes
etag: "99b5cff69958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 17562
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/jquery/jquery-migrate.min.js
200 OK 6.8 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/jquery/jquery-migrate.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (9981)
Hash b6da289eaf1797b500e6c50647bb7356
ed8d92083d4c73fb3cebe0423749da82938eb5a4
8c430239ae7e90e25fc29f1b1371f222794d1321648697b620c6dabc38b58251
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:40:51 GMT
accept-ranges: bytes
etag: "80236d509958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 6802
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/jquery/jquery.js
200 OK 50 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/jquery/jquery.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (32077)
Hash f50b33e0a6c1e0c6dc3baebfc71eb269
320c282b7db53e023b19bf18826f4b8c8aa685a9
789484d59930c20710db5060c520d0c806f6b853f2ef6f5c9851ee7211a03852
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/jquery/jquery.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:40:52 GMT
accept-ranges: bytes
etag: "0ba5519958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 50307
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/07/winner-menu-logo.png
301 Moved Permanently 203 B URL HTTP/1.1 www.btcotomasyon.com/web/wp-content/uploads/2019/07/winner-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8413355f8afba1b034ba9161cecf3a3e
aa97e49639185fa14bfe0cfd7f1f247fadb33ad9
7856641c1196a2eeb96ecad8a87901853e2cc839dffe0b5d7082a61d94f977f4
GET /web/wp-content/uploads/2019/07/winner-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/web/wp-content/uploads/2019/07/winner-menu-logo.png
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:41 GMT
Content-Length: 203
www.btcotomasyon.com/web/wp-content/uploads/2019/06/btc-web-logo.png
301 Moved Permanently 199 B URL HTTP/1.1 www.btcotomasyon.com/web/wp-content/uploads/2019/06/btc-web-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 3c0de0f7e086df81a64a2bd3f6670a10
41468e21878963eb7aa50a5b31cef5e7f850b1fe
eacd84bdcfd743a15be47335505683b06dd9eb6ddcf641d94e7f3a5308a76619
GET /web/wp-content/uploads/2019/06/btc-web-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/web/wp-content/uploads/2019/06/btc-web-logo.png
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:41 GMT
Content-Length: 199
www.btcotomasyon.com/web/wp-content/uploads/2019/07/hawe-menu-logo.png
301 Moved Permanently 201 B URL HTTP/1.1 www.btcotomasyon.com/web/wp-content/uploads/2019/07/hawe-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 70a22f7e17c25e8888c255ff359a8fd9
c588a5b1cde54b5668d36a62cb95df9bdfe8097a
bc4743e02edb6f601d2fc99475c3f70c091140c5e068ddf073da3bb6d01ed215
GET /web/wp-content/uploads/2019/07/hawe-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/web/wp-content/uploads/2019/07/hawe-menu-logo.png
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:41 GMT
Content-Length: 201
www.btcotomasyon.com/web/wp-content/uploads/2019/07/hoerbiger-menu-logo.png
301 Moved Permanently 206 B URL HTTP/1.1 www.btcotomasyon.com/web/wp-content/uploads/2019/07/hoerbiger-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 79b31bce4e407299bcf6c0ceb69541fb
98d2330f1cc9fd7ad69bbb5e81e24702e7f22475
20d8a016334f57fa7e2f95c45a97bc316741b12732953e86f5d79a2c49ca7a5d
GET /web/wp-content/uploads/2019/07/hoerbiger-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/web/wp-content/uploads/2019/07/hoerbiger-menu-logo.png
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:41 GMT
Content-Length: 206
www.btcotomasyon.com/web/wp-content/uploads/2021/08/eckerle-menu-logo-01.png
301 Moved Permanently 207 B URL HTTP/1.1 www.btcotomasyon.com/web/wp-content/uploads/2021/08/eckerle-menu-logo-01.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 58c136e7f2d802bd6e21191ca3ba88c9
f8ff9865dddf468e3a9210f531bfb37afe407aed
62c882244f01cd9c2a016935020f8a5e50cd9a3fd95fa102fb0d6e126ea44ad9
GET /web/wp-content/uploads/2021/08/eckerle-menu-logo-01.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/web/wp-content/uploads/2021/08/eckerle-menu-logo-01.png
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:41 GMT
Content-Length: 207
www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js
200 OK 56 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (27287)
Hash 83defc39ebea1516bae679888c7f23a4
ec7f6a016ae9757881c823859d3297fe647c15bb
60189f1951497814638204f9c83edef7ef58ad21e74ff3eab658193aa9925848
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:11:16 GMT
accept-ranges: bytes
etag: "0a36909d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 56102
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js
200 OK 29 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (64636)
Hash 15f833eff1d84db267ef5f58b02caffd
5b7c6e1b616668557b107c80870ca21d4793fb89
8f90ced2b0f0717972e2532e337c0acd823b515d8f91ce19bce0df9b5db106b8
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:11:16 GMT
accept-ranges: bytes
etag: "0a36909d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 29211
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/wp-emoji-release.min.js
200 OK 7.2 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/wp-emoji-release.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (9126)
Hash 7b705dd6d4559ffdeef68b4feae788dd
9bddc3c89d83ee118feae5c95ef98ae8d4e776a2
4999c063aa8883244ef9122f513a4a394a4c48dab997c2fd1dd1fcba5b9fa6d0
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/wp-emoji-release.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:40:17 GMT
accept-ranges: bytes
etag: "8026293c9958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 7194
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a5ff07b9b81cdf319f4a57d8d6dbbd6d
736ae15d0ed2068580d35a7cff8b33c0ec87af52
24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.btcotomasyon.com/web/wp-content/plugins/gtranslate/flags/24/en.png
200 OK 1.8 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/gtranslate/flags/24/en.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash ec7233b5c80e5db85f7733b2ec25203f
d4c36fff06dc7d920b10eb13b58ea9cd9321b430
347ee97a492f79675749d03533810ff899ee6a784b4e156f3e0a7613cdfb3d40
GET /web/wp-content/plugins/gtranslate/flags/24/en.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 25 Apr 2022 12:07:18 GMT
accept-ranges: bytes
etag: "ba3ac229d58d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 1767
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/gtranslate/flags/24/tr.png
200 OK 806 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/gtranslate/flags/24/tr.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash c3c8bcff26103599cfb2640de06b8be2
1648b50bef3a980c55bc9d271df9c0ab844784b6
2f5f886ab37c9b9d21d8952d9779a543d7bb82f2736eacdf925243df81e17064
GET /web/wp-content/plugins/gtranslate/flags/24/tr.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 25 Apr 2022 12:07:23 GMT
accept-ranges: bytes
etag: "4f68a559d58d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 806
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/revslider/admin/assets/images/transparent.png
200 OK 71 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/revslider/admin/assets/images/transparent.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 753f6c59bbe7913f21576b58b193bc5a
b3e3885f69e401b3a320010ff7a40dd19768fe3b
8ea078292393a14a8e44be139a7fa6ed09d9c650e210eccca587045239b71cab
GET /web/wp-content/plugins/revslider/admin/assets/images/transparent.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 25 Apr 2022 12:11:07 GMT
accept-ranges: bytes
etag: "ff672e8b9d58d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 71
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/revslider/ngo/home_ngo_slider_pic2.png
200 OK 108 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/revslider/ngo/home_ngo_slider_pic2.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 352 x 327, 1-bit colormap, non-interlaced\012- data
Hash 90a4fd2747de5ca5e6c1d7008eccea13
49517044905af286e2ff0dba8d41c611403ca7ac
ce6a6ca37b7f876f90165d3849682f0fe5e777224f527defd90265ee5903dc13
GET /web/wp-content/uploads/revslider/ngo/home_ngo_slider_pic2.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:04:04 GMT
accept-ranges: bytes
etag: "f08433991d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 108
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/07/hawe-menu-logo.png
200 OK 6.3 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2019/07/hawe-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 125 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 04621308b56029e6fc7ca07676c82499
eadfd6c23b1ddaf1904d9421d0b135f43bbbaa69
2a91fb2d52f5968501556f09277904a504a9ee8e36795c4a360963f099b5b9b5
GET /web/wp-content/uploads/2019/07/hawe-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:03:47 GMT
accept-ranges: bytes
etag: "b0aae9fe90d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 6333
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/07/imo-slider-logo-01.png
200 OK 13 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2019/07/imo-slider-logo-01.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 175 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 5fa28012e34f0e63b91138ea43b9501d
b2a6a1aaf6f7b174c637e3c4c45c83340cb85959
d081ac7f4c91358b5dd0a546bbcbcbd3007fd88be219a733746fb28a1dbe9aff
GET /web/wp-content/uploads/2019/07/imo-slider-logo-01.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:03:47 GMT
accept-ranges: bytes
etag: "32456ff90d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 13419
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2021/08/eckerle-menu-logo-01.png
200 OK 4.2 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2021/08/eckerle-menu-logo-01.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 125 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 5a65846fcaabeb7e29aeb3e442f2568f
5f0aba6e1b6d3695b010c6358fb3c5d3afa9889b
896393ef85e089dc94deddbba40949002e7f8896e22d393240b3d066956ca939
GET /web/wp-content/uploads/2021/08/eckerle-menu-logo-01.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:04:02 GMT
accept-ranges: bytes
etag: "23447891d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 4154
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/07/imo-menu-logo.png
301 Moved Permanently 200 B URL HTTP/1.1 www.btcotomasyon.com/web/wp-content/uploads/2019/07/imo-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash edf4d5c19fa32212c51cdcf0b23e3d5c
1e5edd4219a111910296ccb84b854e52db63923e
7f1c02ef077255bdadb37cb3c3ee90fe34e041248f0211e0a5c638ce50cae93e
GET /web/wp-content/uploads/2019/07/imo-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/web/wp-content/uploads/2019/07/imo-menu-logo.png
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:41 GMT
Content-Length: 200
www.btcotomasyon.com/web/wp-content/uploads/2019/07/7ocean-menu-logo.png
301 Moved Permanently 203 B URL HTTP/1.1 www.btcotomasyon.com/web/wp-content/uploads/2019/07/7ocean-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 440259853306a065f50f7bcad7a60dd2
3d510cd15ed3ab32692b2b79a62507b3870716e3
b24e08d35206539ae51abb0eb27ea8d293b4d9f00c68827ba73f1961229586f5
GET /web/wp-content/uploads/2019/07/7ocean-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/web/wp-content/uploads/2019/07/7ocean-menu-logo.png
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:41 GMT
Content-Length: 203
www.btcotomasyon.com/web/wp-content/uploads/2021/09/have_slider_1resim.jpg
200 OK 145 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2021/09/have_slider_1resim.jpg
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=488, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=860], progressive, precision 8, 860x488, components 3\012- data
Size 145 kB (145248 bytes)
Hash 67779032138083b34182f1ebb70506c2
654e61d807a262eeafc4b9f39a3eba38c5078b3b
a66a25dbc75b17a2643460722e1d0572b8bad9b5276932d0e2520378dda734db
GET /web/wp-content/uploads/2021/09/have_slider_1resim.jpg HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Wed, 05 Oct 2022 08:04:03 GMT
accept-ranges: bytes
etag: "627ee1891d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 145248
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2021/09/bannn3.jpg
200 OK 115 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2021/09/bannn3.jpg
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=488, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=860], progressive, precision 8, 860x488, components 3\012- data
Size 115 kB (115254 bytes)
Hash 353208a3d1b8c045b340f75d8018f2a0
f7103d20baddafa6669acf2f8a62dd6b8424668a
66bfa5b8107af59ca04b8607623a08069f9bbf032617a422b3e7653915a6f2f2
GET /web/wp-content/uploads/2021/09/bannn3.jpg HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Wed, 05 Oct 2022 08:04:03 GMT
accept-ranges: bytes
etag: "c851dc891d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 115254
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2021/09/btc-web-logo.png
200 OK 16 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2021/09/btc-web-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 161 x 141, 8-bit/color RGB, non-interlaced\012- data
Hash bb1b111a125ecf3821199850968c4386
dcf3099781809b755cc9e19125e4eaba819e57d6
bad98df9dc8cd452a8f815facd7eaf446c706eff58b347d2736b92e378a64c6b
GET /web/wp-content/uploads/2021/09/btc-web-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:04:03 GMT
accept-ranges: bytes
etag: "3d4cde891d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 16358
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2021/09/220.jpg
200 OK 48 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2021/09/220.jpg
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=17], progressive, precision 8, 337x220, components 3\012- data
Hash 05dcfc42a2473d5463390ccd6b15cb0f
f3cd78adec8de7742f57049f4aef1e2b7337c84e
4e6456ef2abd96973c2ed44a7ac019d8ba1e055d79b711df0684aed7bf6d4f36
GET /web/wp-content/uploads/2021/09/220.jpg HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Wed, 05 Oct 2022 08:04:03 GMT
accept-ranges: bytes
etag: "1b1fa8891d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 47953
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/contact-form-7/includes/js/scripts.js
200 OK 7.6 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/contact-form-7/includes/js/scripts.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
Hash 59c3cc4a0936ac96d15c7c7e49824b88
bc2ee2666b5e128b03c9b8fd72db7027d3eb810a
649773e3595af0e845e70dc9d8754a531c565527e3234de0de7d575edc3b7ebd
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/plugins/contact-form-7/includes/js/scripts.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:07:03 GMT
accept-ranges: bytes
etag: "804d69f99c58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 7566
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/jquery/ui/core.min.js
200 OK 3.7 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/jquery/ui/core.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (3797)
Hash 0156b7a450fe50df16815ac823d46ad1
56980251eaafec875a6fb070d35451d3466b2e6a
502a02230e6f48c86a383df06ca272eb732752cfc29fdb29e1553e2a908a559b
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/jquery/ui/core.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:41:21 GMT
accept-ranges: bytes
etag: "80c64e629958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 3721
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/jquery/ui/widget.min.js
200 OK 5.0 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/jquery/ui/widget.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (6706)
Hash c7f94e3feceda043ad41c4c185cb08ec
08740353b3ae1d95c54599d1328e984d5f8d769c
40af5f1832bb3dc9101ada5a25dd91043e99a42480bc70d10306d33c6421c38c
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/jquery/ui/widget.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:41:23 GMT
accept-ranges: bytes
etag: "80f37f639958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 5018
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/jquery/ui/mouse.min.js
200 OK 2.9 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/jquery/ui/mouse.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (2955)
Hash f34613ade1a070ab5a005e3c073c754c
89a4dfe439b1835ef4263205e86aee2a8328ce2f
db83c0bfb39c188d44683ffcaa4da22f000af9b91617d7eea7cbb277a2d100a1
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:41:22 GMT
accept-ranges: bytes
etag: "05de7629958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 2917
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/jquery/ui/sortable.min.js
200 OK 11 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/jquery/ui/sortable.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document, ASCII text, with very long lines (24700)
Hash 0ff3764f17eb78692aed916adbc158e5
bc8b5e025899059674aa90f5a55e88327c83d6ff
bfc18f9ffbaedba0d5d3869af616203187e7ea949679ca0fbc3794d80795b428
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/jquery/ui/sortable.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:41:23 GMT
accept-ranges: bytes
etag: "80f37f639958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 11446
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/jquery/ui/tabs.min.js
200 OK 7.0 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/jquery/ui/tabs.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (11919)
Hash 6a6a4e5c26c69be24d5b0c8a2fa64315
3f4b2bd35634dc2a976b74c4dcfd623375eff3c1
ff9a6258e99a61a78f5da1e6dde833dc67ed5c69d560e6fe4fe89122ffe499d5
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/jquery/ui/tabs.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:41:23 GMT
accept-ranges: bytes
etag: "80f37f639958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 7027
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/jquery/ui/accordion.min.js
200 OK 5.4 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/jquery/ui/accordion.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (8383)
Hash 2f7461939cb4e6953fc07bddd592f6a3
3314beccb8779a82b1cf27458c5b011ee49ecff2
a232d93d9e367395b9f0ab792a9bd7ca11d8a3c4d2463a29f7f7261df1dc0a66
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/jquery/ui/accordion.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:41:21 GMT
accept-ranges: bytes
etag: "80c64e629958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 5353
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/js/menu.js
200 OK 2.7 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/js/menu.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
Hash 71bf0fd83bf4e591790315c59075b41b
e4b82312c028da36d5baf872774e61a0da1ec833
9cf7b75db14e1e5994fb7ce7104794d150e0f7f75467baf8c7b422a32017ae95
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/themes/btcotomasyon/js/menu.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:45:59 GMT
accept-ranges: bytes
etag: "8035289a58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 2737
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/animations/animations.min.js
200 OK 2.4 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/animations/animations.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (1745)
Hash 8688be6638805ac0838921adc69a9ff5
d4122286d3ee57740f55a9829dfbf532443b38c9
df380b59b092199d91eb1afd408c0d80f4705b0e14217cb4f89c00eb0f257166
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/themes/btcotomasyon/assets/animations/animations.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:08:39 GMT
accept-ranges: bytes
etag: "80bda1329d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 2393
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/jplayer/jplayer.min.js
200 OK 22 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/assets/jplayer/jplayer.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (634)
Hash 566f20f6eb199610c8c6b75b02cce901
a56e4c83876c50954f2c2f11652723f61a1f20c4
7817346c0464dc60babba1c9601d146e5f3873b368ee3905d38af8d5243df718
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/themes/btcotomasyon/assets/jplayer/jplayer.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:08:39 GMT
accept-ranges: bytes
etag: "80bda1329d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 21537
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/js/parallax/translate3d.js
200 OK 3.9 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/js/parallax/translate3d.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
Hash c68c4c7aa1a165d944a28d313ac15329
1c6066c8a1e0e74b9bc32f746e13597d2926ea54
c2e0a8a7e2aff07bdde3dcd20d1a3263dfe3e1c390149c83403f0c1a777fac27
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/themes/btcotomasyon/js/parallax/translate3d.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:08:44 GMT
accept-ranges: bytes
etag: "0ae9c359d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 3924
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/js/scripts.js
200 OK 24 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/js/scripts.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
Hash 6d1232d043d079e206ca20e7ede3ea00
4f96722c4b3cebcab0fe71a59e77e4e4d932e105
763aecb58cd8c292d8f62415ddb5f16a39018f135b3eaab1f7f95bba2d7641da
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/themes/btcotomasyon/js/scripts.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:46:00 GMT
accept-ranges: bytes
etag: "0cc9a89a58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 24200
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/comment-reply.min.js
200 OK 2.9 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/comment-reply.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (2256)
Hash 6791aa84f837ae4e29e68aee070f246a
16c313cf3ef5ab0906b7318267efc17b7e0d0421
82674ff68233b8277e68a4e2b070515696ea98732c5fcc56367c0feeeaee7dda
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/comment-reply.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:40:15 GMT
accept-ranges: bytes
etag: "80f9f73a9958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 2948
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (22967)
Hash f7bf2121608909b56672e6398ac2335c
864ef3bac46b08ab6609fad23f00d5f09815647d
b9d3a8600d9b6edf9c71b793c42782282ecfb01e2026e0128608b949e91e152c
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 11:09:28 GMT
expires: Tue, 31 Jan 2023 12:09:28 GMT
cache-control: public, max-age=3600
age: 1874
last-modified: Mon, 09 Jan 2023 20:58:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-includes/js/wp-embed.min.js
200 OK 2.6 kB URL HTTP/2 www.btcotomasyon.com/web/wp-includes/js/wp-embed.min.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (1425)
Hash c5eb736c299ae9a92f973c2aad10c53c
6597abbf1b633c8178102a75c2a912361ea30670
93131e07c059df88c1ce98c5f0849d10e887204a42642e221c7cd32aaebeaeb9
Analyzer Verdict Alert fortinet Malware
GET /web/wp-includes/js/wp-embed.min.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:40:17 GMT
accept-ranges: bytes
etag: "8026293c9958d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 2579
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.btcotomasyon.com/web/wp-content/uploads/2019/07/winner-menu-logo.png
200 OK 14 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2019/07/winner-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 125 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 1eab8a9a47bc1cebe9eef7ff57f78a73
a77b2b9a1dc9e30998759dfd67f6b7e67b9a4e4f
9e880fa259eca559d9868b3a5bf943d588650b8dde36b981f386b665a9ed7b2b
GET /web/wp-content/uploads/2019/07/winner-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:03:48 GMT
accept-ranges: bytes
etag: "bcd7b6ff90d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 14378
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.btcotomasyon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 18:52:41 GMT
expires: Tue, 30 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 60481
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/06/btc-web-logo.png
200 OK 16 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2019/06/btc-web-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 161 x 141, 8-bit/color RGB, non-interlaced\012- data
Hash bb1b111a125ecf3821199850968c4386
dcf3099781809b755cc9e19125e4eaba819e57d6
bad98df9dc8cd452a8f815facd7eaf446c706eff58b347d2736b92e378a64c6b
GET /web/wp-content/uploads/2019/06/btc-web-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:03:16 GMT
accept-ranges: bytes
etag: "6f885fec90d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 16358
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/07/hoerbiger-menu-logo.png
200 OK 6.7 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2019/07/hoerbiger-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 125 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash a893988aa2ca6db693101d763577cb64
46e6dc1d56c0f5f941feef21b5b9f32e8d539192
fb1076c338b3f464de6ddb9e7cd5289213561ce3ef1771b5268b3ed6e921ab84
GET /web/wp-content/uploads/2019/07/hoerbiger-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:03:47 GMT
accept-ranges: bytes
etag: "215afafe90d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 6703
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Hash 3fe71527811fbfedd2c07962e1bc49e7
f63e158a0480c5d711b5e268db0e75e57d87a8a5
24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.btcotomasyon.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 10:24:40 GMT
expires: Mon, 29 Jan 2024 10:24:40 GMT
cache-control: public, max-age=31536000
age: 177362
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2021/09/BTC_BinaFoto.jpg
200 OK 1.7 MB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2021/09/BTC_BinaFoto.jpg
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 180x180, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15], baseline, precision 8, 3960x2216, components 3\012- data
Size 1.7 MB (1651689 bytes)
Hash e5323632b95ebdeb7369d196c74998f9
83291b4c8bfa9a64188e2463423d9d448af0cf74
516cfc195e2fce996ab625295aecca62e0fe61060ed6a76c08d9bf0d6d85c1d8
GET /web/wp-content/uploads/2021/09/BTC_BinaFoto.jpg HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Wed, 05 Oct 2022 08:04:03 GMT
accept-ranges: bytes
etag: "7235ae891d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 1651689
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2021/09/BTC_LobiFoto.jpg
200 OK 1.8 MB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2021/09/BTC_LobiFoto.jpg
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, description= , manufacturer=Canon, model=Canon PowerShot G1 X, orientation=upper-left, xresolution=218, yresolution=226, resolutionunit=2, datetime=2021:09:01 10:07:05], baseline, precision 8, 4352x2448, components 3\012- data
Size 1.8 MB (1791932 bytes)
Hash 34c1491db8c83eb1054ecb876ed6538b
8fd24ea59fd0a5cf5cce04d8041fbe774f3be06f
668d86104dd303604e08cd30f50bd29cf4a9b6e8c5ca1d15c6cfa09307b7b3ec
GET /web/wp-content/uploads/2021/09/BTC_LobiFoto.jpg HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Wed, 05 Oct 2022 08:04:03 GMT
accept-ranges: bytes
etag: "4278b2891d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 1791932
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/fonts/mfn-icons.woff?23391439
200 OK 81 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/fonts/mfn-icons.woff?23391439
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type Web Open Font Format, TrueType, length 80636, version 1.0\012- data
Hash 3da843d15ed5d4d39e269cfbad8345fb
1d915a3fd051f9e9cf6f545dfe31939fdb368738
f6134456d89988ada75cfdf21df40c6abdccccf01b48a669add0223f3fa38ec4
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/themes/btcotomasyon/fonts/mfn-icons.woff?23391439 HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/base.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/x-woff
last-modified: Mon, 25 Apr 2022 11:45:33 GMT
accept-ranges: bytes
etag: "a160b1f89958d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 80636
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/07/imo-menu-logo.png
200 OK 9.7 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2019/07/imo-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 125 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash a93acaca15d5f4b24afc0724c5a7a09b
0b7809ca16cff3942f38a8d31655677f4464149f
0cba423ddd8150015ea54536ffa3a9cfffc117eac808cd0c05989798d3d01d07
GET /web/wp-content/uploads/2019/07/imo-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:03:47 GMT
accept-ranges: bytes
etag: "c4801ff90d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 9661
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/07/7ocean-menu-logo.png
200 OK 10 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2019/07/7ocean-menu-logo.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 125 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f9ec26096d6177d43636ed47efa2757
4b397675b0b2c7b041da17a3894ca54c967e5ac1
8bad0d68e502a05435a64e9d9e267b6f692b716d7648f3e1fb6af1ec655f6ab3
GET /web/wp-content/uploads/2019/07/7ocean-menu-logo.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:03:30 GMT
accept-ranges: bytes
etag: "23a7c2f490d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 10272
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/images/box_shadow.png
200 OK 108 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/images/box_shadow.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 5 x 3, 2-bit colormap, non-interlaced\012- data
Hash 449d9ef55c135a86ebd8ec91c7f170e6
acbb68ea104cfdd08081c66ce8a151e4668ef313
3f10d52942270b9e2da36af3915028bd73dfab3703bc13f060234cb0aa5bae2f
GET /web/wp-content/themes/btcotomasyon/images/box_shadow.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/css/shortcodes.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 25 Apr 2022 11:45:51 GMT
accept-ranges: bytes
etag: "fcb46239a58d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 108
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/contact-form-7/images/ajax-loader.gif
200 OK 847 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/contact-form-7/images/ajax-loader.gif
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type GIF image data, version 89a, 16 x 16\012- data
Hash af962b37779a443a77ab836b3b7a93f5
cad7feb11183c71b87470e11e022b16ecdcc7ac9
65b72e15d975f67fbd1cb126d57772c06c21fa016e5651b6ce213b26ce0e6877
GET /web/wp-content/plugins/contact-form-7/images/ajax-loader.gif HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/web/wp-content/plugins/contact-form-7/includes/css/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
last-modified: Mon, 25 Apr 2022 11:43:49 GMT
accept-ranges: bytes
etag: "99d18bba9958d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 847
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.8
200 OK 4.9 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.8
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (8111)
Hash ccb9a13bf621663a6ff058263034f3c1
955906fba44356743ebde343593db7274df36d6e
27dd829de60f7ec3c68c69c0a153817f2c21eb03f5b322345ce33c679873272d
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.8 HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:12:28 GMT
accept-ranges: bytes
etag: "05e20bb9d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 4888
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8
200 OK 12 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (28840)
Hash 55e3907e620a0d7ee06abb646bbdfc66
0eebd79fa0f9225da9a9f1be9295ae131ec779a9
a0e0a35fb0a4309a008414c5cd4bf362c32c70d32b4a6038807a520b3df3003a
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8 HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:12:28 GMT
accept-ranges: bytes
etag: "05e20bb9d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
content-length: 11721
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8
200 OK 23 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type ASCII text, with very long lines (55578)
Hash fc66ef8acdfe1299dac88658166f3d04
cf7529188883c6973d559089826621dda18b06c1
da27e352dc7668f4c34f8c9c5e3b4f94560cf05476a92eb9c6c06cbd1ede7161
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8 HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 12:12:28 GMT
accept-ranges: bytes
etag: "05e20bb9d58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:42 GMT
content-length: 23026
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 31 Jan 2023 09:46:59 GMT
expires: Tue, 31 Jan 2023 11:46:59 GMT
cache-control: public, max-age=7200
age: 6823
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.btcotomasyon.com/web/wp-content/uploads/2019/07/btc-favicon.png
301 Moved Permanently 198 B URL HTTP/1.1 www.btcotomasyon.com/web/wp-content/uploads/2019/07/btc-favicon.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 956930e8c4f3623a806918a410051fa7
1700da48f7175e6da25b983a73b2d3b18253b056
39d876174ef570410c113c06cb49d915028cff50d1be99ff34491c438af621b2
GET /web/wp-content/uploads/2019/07/btc-favicon.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.btcotomasyon.com/web/wp-content/uploads/2019/07/btc-favicon.png
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Tue, 31 Jan 2023 11:40:42 GMT
Content-Length: 198
www.btcotomasyon.com/web/wp-content/uploads/2019/07/btc-favicon.png
200 OK 5.0 kB URL HTTP/2 www.btcotomasyon.com/web/wp-content/uploads/2019/07/btc-favicon.png
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash 995573210f12fcc5479928b3a5dfb87b
2891a8836d4bb2dd5c24bda4e8e7a2ce7e569984
d2848d6d1098e7199590ba539aadc991439cce6ffdd57901c1071a047c8aefb1
GET /web/wp-content/uploads/2019/07/btc-favicon.png HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Wed, 05 Oct 2022 08:03:47 GMT
accept-ranges: bytes
etag: "45e6e4fe90d8d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:42 GMT
content-length: 5025
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/1x/translate_24dp.png
200 OK 846 B URL HTTP/2 www.gstatic.com/images/branding/product/1x/translate_24dp.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e9cd262114358f26b7608b56905185dc
6dbde0a96deaab2b529723ce26c62043cf9180ab
5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 12:53:47 GMT
expires: Tue, 30 Jan 2024 12:53:47 GMT
cache-control: public, max-age=31536000
age: 82015
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
200 OK 910 B URL HTTP/2 www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
IP
File type PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash efa6bb2bfe459bc6f4bdafa3db0383f6
52d15ce52fe50643e542c17812de43f4ed1b6ee0
6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 07:32:15 GMT
expires: Mon, 29 Jan 2024 07:32:15 GMT
cache-control: public, max-age=31536000
age: 187707
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL HTTP/2 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 16:07:41 GMT
expires: Tue, 30 Jan 2024 16:07:41 GMT
cache-control: public, max-age=31536000
age: 70381
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 69ffc0a3f7ca2b025a6b99f9c38889be
1b436bda66cd246a1024f8c3d8e91e3aeef31eaa
9aaaf6c2a570c6a73a623f4fdfb0e1dfd5f16f086ae5d9c8d5b2403b0d016e4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&gjid=1647121211&_gid=662890179.1675165259&_u=YEBAAUAAAAAAACAAI~&z=346132615
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&gjid=1647121211&_gid=662890179.1675165259&_u=YEBAAUAAAAAAACAAI~&z=346132615
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&gjid=1647121211&_gid=662890179.1675165259&_u=YEBAAUAAAAAAACAAI~&z=346132615 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.btcotomasyon.com
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.btcotomasyon.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 31 Jan 2023 11:40:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 69ffc0a3f7ca2b025a6b99f9c38889be
1b436bda66cd246a1024f8c3d8e91e3aeef31eaa
9aaaf6c2a570c6a73a623f4fdfb0e1dfd5f16f086ae5d9c8d5b2403b0d016e4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2ac1bcdceabf1fc4e07017906aa8a815
ba00b737325fc50b35af8d851ced0fe13d1cba22
c6c54f5dbbfc40b454b9c67a7972827f500d83b10a1594f7cb56c69158278c08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 73d6f94eec5f7bf78dc11951011af215
2d7941713a82a83c174bf782b618a6f86a8ab2d7
9de1920abadb3501bcf9f787608807f13a266efea69f12fc811bc7cac14a3552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&_u=YEBAAUAAAAAAACAAI~&z=1351006528
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&_u=YEBAAUAAAAAAACAAI~&z=1351006528
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&_u=YEBAAUAAAAAAACAAI~&z=1351006528 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 11:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&_u=YEBAAUAAAAAAACAAI~&z=1351006528
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&_u=YEBAAUAAAAAAACAAI~&z=1351006528
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-144624572-1&cid=1232027365.1675165259&jid=189077881&_u=YEBAAUAAAAAAACAAI~&z=1351006528 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 31 Jan 2023 11:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 73d6f94eec5f7bf78dc11951011af215
2d7941713a82a83c174bf782b618a6f86a8ab2d7
9de1920abadb3501bcf9f787608807f13a266efea69f12fc811bc7cac14a3552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/js/plugins.js
200 OK 0 B URL HTTP/2 www.btcotomasyon.com/web/wp-content/themes/btcotomasyon/js/plugins.js
IP
ASN #34619 Cizgi Telekomunikasyon Anonim Sirketi
Analyzer Verdict Alert fortinet Malware
GET /web/wp-content/themes/btcotomasyon/js/plugins.js HTTP/1.1
Host: www.btcotomasyon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
last-modified: Mon, 25 Apr 2022 11:46:00 GMT
accept-ranges: bytes
etag: "0cc9a89a58d81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 31 Jan 2023 11:40:41 GMT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A1%2C300%2C400%2C400italic%2C700%2C700italic
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A1%2C300%2C400%2C400italic%2C700%2C700italic
IP
GET /css?family=Open+Sans%3A1%2C300%2C400%2C400italic%2C700%2C700italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 11:40:41 GMT
date: Tue, 31 Jan 2023 11:40:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300%2C700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300%2C700
IP
GET /css?family=Open+Sans:300%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 11:40:41 GMT
date: Tue, 31 Jan 2023 11:40:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
200 OK 0 B URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
IP
GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.btcotomasyon.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 31 Jan 2023 11:40:41 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+911; expires=Thu, 30-Jan-2025 11:40:41 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
89.19.13.202
142.250.74.110
95.101.11.115
0.0.0.0