r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30c30d01178fc74ac5266ee64c3ee85b
c0c2af8a864c00aa85a8775d55f85ab107150a3b
c15644f69fbfeb99074c7e9711dfc9452ee164fa78eb981b6bae4fb7e3585f2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C15644F69FBFEB99074C7E9711DFC9452EE164FA78EB981B6BAE4FB7E3585F2A"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14243
Expires: Fri, 18 Nov 2022 10:02:05 GMT
Date: Fri, 18 Nov 2022 06:04:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash be1be806b5dca7facbb45a6c3db44652
7ae9380a2f3eca959fe6ff6b3832a17cffd12cf4
1f3338058f8e9cae5c9fdd733c74564312726b01c6efdcd628d851d0c99876b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5600
Cache-Control: max-age=108001
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 06:04:42 GMT
Etag: "63760d7b-1d7"
Expires: Sat, 19 Nov 2022 12:04:43 GMT
Last-Modified: Thu, 17 Nov 2022 10:31:23 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3a38b6dd8a4cc335c026aebf2ed348b6
8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8
8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17945
Expires: Fri, 18 Nov 2022 11:03:47 GMT
Date: Fri, 18 Nov 2022 06:04:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 05:45:01 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1181
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: iuV3/0etou7A35YyfupZPSWo9KuKLaESK+dC3x4D7ILI8b0eEKO+N5wznP87vjLxO7WeyylSxPw=
x-amz-request-id: P1VEWKYSGQX2T3E6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 05:52:46 GMT
age: 716
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 06:04:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.abbmedikal.com/
200 OK 6.8 kB IP
ASN #51557 Isimtescil Bilisim A.S.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2287), with CRLF, LF line terminators
Hash 07dfa98f5cffd097427a538c3b9ab801
46a64428a932a4081a328412f99532bc8b063f9e
9483d85c26e25fff7bdfee22b56b20509539655937b8f2bd0db1f939d0b3ca89
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Link: <http://www.abbmedikal.com/wp-json/>; rel="https://api.w.org/", <http://www.abbmedikal.com/>; rel=shortlink
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
fonts.googleapis.com/css?family=Montserrat%3A400%2C700%7COpen+Sans%3A300%2C400%2C600%2C700%2C800%2C300italic%2C400italic%2C600italic%2C700italic%2C800italic&subset=latin&ver=1588689398
200 OK 1.2 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Montserrat%3A400%2C700%7COpen+Sans%3A300%2C400%2C600%2C700%2C800%2C300italic%2C400italic%2C600italic%2C700italic%2C800italic&subset=latin&ver=1588689398
IP
Hash d3df0deec7fcb34db7b749de6a56ad3c
28328b9cff99168b13b03442502ff74b5a054b2d
3e2d6772d5387ae44dbb58336f070b2a82b979c4a0da95e0fc4f4059bb229526
GET /css?family=Montserrat%3A400%2C700%7COpen+Sans%3A300%2C400%2C600%2C700%2C800%2C300italic%2C400italic%2C600italic%2C700italic%2C800italic&subset=latin&ver=1588689398 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 18 Nov 2022 06:04:42 GMT
Date: Fri, 18 Nov 2022 06:04:42 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.abbmedikal.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 4.0 kB URL HTTP/1.1 www.abbmedikal.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (9959)
Hash a6c81e2f02bd04160d2de88c4e8f3559
e3f3c91427d785820ca97dabe738f01faf041f36
b734d83af5da0eb627e04d3e62ce652b9eb7de19667a1b91da6b93f0ea5d7ffe
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: application/javascript
Last-Modified: Tue, 30 Aug 2022 19:45:52 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 4014
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 05:44:49 GMT
cache-control: public,max-age=3600
age: 1194
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/jquery.fancybox.css?ver=5.4.12
200 OK 1.4 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/jquery.fancybox.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with CRLF line terminators
Hash a57008fe852f7d0b8ae7220116a87b44
c046ec00e24528eb75ef88e65e64a2fb31ea0648
e06fc1867ed9bc688176ed4f42712048175e5dd896c1358b74247f3b01e356af
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/jquery.fancybox.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:04 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1449
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/select2.min.css?ver=5.4.12
200 OK 1.9 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/select2.min.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (14909), with no line terminators
Hash 853e67ea88b66888ca75f79e196511c3
b9c23824506c672c7045bb5a3956fa8fa737e8ba
976f8a341fa24aefc6f129a27703560cb0ff2db5ccf832fb52d19774fc83a8c3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/select2.min.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:04 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1921
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/animation.css?ver=5.4.12
200 OK 2.2 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/animation.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type CSV text\012- assembler source text\012- assembler source, ASCII text, with CRLF line terminators
Hash 515ce0843df9a9e5b0f2b76b05e4d7c4
2880c9d6b4fb5f90a638f42cd95868a30d5f2c52
3b41b8968a1198d7299f88c106f2b3c29fcc5c8d00251980d67bcc6a5ba3ac60
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/animation.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:04 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 2165
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/style.css?ver=5.4.12
200 OK 645 B URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/style.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with CRLF line terminators
Hash 818641bcb85f5e04d1fc773a05967c2c
859bbe1c3bd266fcbdeb9c9cc26fe5c6a8347931
b5ec8064b090949552b6ea557c478a50514d78996c3b8a5bf8aad270ad152bae
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/style.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:02:14 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 645
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/bootstrap.min.css?ver=5.4.12
200 OK 19 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/bootstrap.min.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (65367), with CRLF line terminators
Hash 1df31594b2e5978878845dffd39255b7
de695561f6bcee9c5025b891cadfd7a89a61f46c
f25dadbfca3c05f356d6215a6e364e53dd1195e7eb5a3321e0a5483d4ff624f2
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/bootstrap.min.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:04 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 19243
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/skins/skin_red_green.css?ver=5.4.12
200 OK 2.2 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/skins/skin_red_green.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with CRLF line terminators
Hash 1522d41eba92e99a251c1c58fdc5e68b
dd6607812192d7191a109780fc7beed91dbeff5e
e98422ee46c77221e5ce3e060fcaf01fe88a6ed635abe95f07ac71c9be945b78
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/skins/skin_red_green.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:06 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 2202
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/skins/skin_blue_green.css?ver=5.4.12
200 OK 2.2 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/skins/skin_blue_green.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with CRLF line terminators
Hash 6e571b5d26b95dc4455c78566b9f0f3c
257fbb77bbff325af07a726d62cfab3e9bf5baa2
e6c6e42d6fdbfe94ac9b702aa6b6f347fefe801cb7008161179cfdbd2f237917
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/skins/skin_blue_green.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:06 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 2200
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/skins/skin_red_brown.css?ver=5.4.12
200 OK 2.3 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/skins/skin_red_brown.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with CRLF line terminators
Hash 52a3c06a2982637935ceb547a2bd3762
f40ed7a5776bb858ebfc0513d6076dff336eefbf
6c2bcb2527f716ecca9c541f707ca26663680149e92615860c3e8d93b3b9eb99
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/skins/skin_red_brown.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:06 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 2307
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/styles.css?ver=5.4.12
200 OK 26 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/styles.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type assembler source, ASCII text, with CRLF line terminators
Hash 26452518a27e8e7ddd57f8baacc0549b
9010d07a41ee6c4db700cb63263efabef37421c3
29169e3791fff623a62c8924e42efe608490c22a09c1651739a0729c0d9bfe92
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/styles.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:04 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 26436
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/skins/skin_custom_color.css?ver=5.4.12
200 OK 243 B URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/skins/skin_custom_color.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with CRLF line terminators
Hash 537aae6ddb1f8f16ac983dfa4df1d171
13a3796b456d75bd56321362047322f38a522cd8
bc7b12e4499c54fcf760ade423b73415545df5198fcb9b443bdc1b698c3611c8
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/skins/skin_custom_color.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:08 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 243
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
ocsp.digicert.com/
200 OK 471 B IP
Hash c10055ce87434f700ff8b20e3be1f919
477b3c9f1da0c464282bb54572737e76b6e346da
4d78eb296876122e5ff40fcd7667adf1bf8a4b1ee4c8203c88a63ce8d7910a57
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5066
Cache-Control: max-age=102398
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 06:04:43 GMT
Etag: "6375f9af-1d7"
Expires: Sat, 19 Nov 2022 10:31:21 GMT
Last-Modified: Thu, 17 Nov 2022 09:06:55 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/icomoon.fonts.css?ver=5.4.12
200 OK 864 B URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/icomoon.fonts.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with CRLF line terminators
Hash e1961d0e080d499925bc607fd02cf0dd
7ea1e14917d6c024224fce31783afdec0470ae50
592cb82b5129db84e4fad681163666853c2ac6d10885f2345df7faf263231a9c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/icomoon.fonts.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:04 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 864
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery-migrate-1.2.1.min.js?ver=5.4.12
200 OK 4.3 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery-migrate-1.2.1.min.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (8638), with CRLF line terminators
Hash 598fe1a447b705adf1a6d7f740f8b408
b1e23b0584671f01bfb57a71cac41ef0376aa157
e2622de818200dce045364ac269c0ea854db7b3b96a82382fe92695df998539e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/js/jquery-migrate-1.2.1.min.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: application/javascript
Last-Modified: Tue, 21 Jun 2022 15:36:56 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 4335
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/css/font-awesome.min.css?ver=5.4.12
200 OK 6.6 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/css/font-awesome.min.css?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (28768), with CRLF line terminators
Hash bb33b09fe02f6ccb5cd0cb995734fa73
e1caf99d7809608e734e95c1b1ae25382e5ef748
e8bc857799d57bf1c41de301e582e72fd87b2c750ca27af7cef804679e4443ad
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/css/font-awesome.min.css?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 27 Nov 2018 11:04:04 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 6641
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-includes/js/wp-emoji-release.min.js?ver=5.4.12
200 OK 4.6 kB URL HTTP/1.1 www.abbmedikal.com/wp-includes/js/wp-emoji-release.min.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (10927)
Hash 84b7e514fafb7e41ada75e98647046d6
bc894b10e2da6cffab281730d8f11ea6b8da849e
6dda1bb598753f4072928313346a46011f4965d7fc9aba2d2e924c0f533d569d
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: application/javascript
Last-Modified: Tue, 30 Aug 2022 19:45:52 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 4646
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery.fancybox.js?ver=5.4.12
200 OK 9.1 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery.fancybox.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (24637), with CRLF line terminators
Hash cc5cacce76cb63d4a56bd2b28c1b46d7
78ae9b9d129e6a50a3f5bdc17c91b32280105df3
463961a23c9a326eb1441eaf7aedf91a7171b11742400db3a4bb2ee2e2a09c8b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/js/jquery.fancybox.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 27 Nov 2018 11:03:58 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 9096
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery.countdown.js?ver=5.4.12
200 OK 1.7 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery.countdown.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (1564), with CRLF line terminators
Hash 9d924281f48baffe70873298e9ee7f75
7d885042f0f25217ed8e0fa227deea5469381f8c
c3c945e0f96414805d87ad8bea2b0c8a4adef898e8af7b9921ca159da440c339
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/js/jquery.countdown.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 27 Nov 2018 11:03:58 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1737
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 34 kB URL HTTP/1.1 www.abbmedikal.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (31997)
Hash a5798cf6edb87e2f64df51a38eceef6a
a96934773339f6f36a5b37c5d6903ad95c062dca
d65dc5e8cea9e4daea184d6de7d896eb23d08f04b3bc20fb9b35b237e93ec6ce
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: application/javascript
Last-Modified: Tue, 18 Oct 2022 02:27:25 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 33804
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/js/bootstrap.min.js?ver=5.4.12
200 OK 9.9 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/js/bootstrap.min.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (32087), with CRLF line terminators
Hash fe3bc78f9b73a290ccdade7350bc6c89
88621edcd09a081ec1cafb7e2895c31d7a7022cd
eae942691e17229fa51ad8fee4415388687003f675cbfa11d1e31d6849f6a4ce
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/js/bootstrap.min.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: application/javascript
Last-Modified: Tue, 27 Nov 2018 11:03:58 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 9892
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery.carouFredSel-6.2.1.min.js?ver=5.4.12
200 OK 14 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery.carouFredSel-6.2.1.min.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (32031), with CRLF line terminators
Hash c39498a5610ff138cffc5dc8037d0645
d52ebe1d39f688c9a579297091c964b1c945dd7c
33cf9e2c9ddcec17c6719161403957fddfffbb40543b534701aa361ce906feeb
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/js/jquery.carouFredSel-6.2.1.min.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 27 Nov 2018 11:03:58 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 14116
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-includes/js/imagesloaded.min.js?ver=3.2.0
200 OK 2.6 kB URL HTTP/1.1 www.abbmedikal.com/wp-includes/js/imagesloaded.min.js?ver=3.2.0
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (7996)
Hash f2e81696f49d311a1075200ceac2b820
084965f7a693f5ada016d0d8c99d85f518519ff7
70a71538a7a224f214aafcdef6623f316fd2c393546857c6c3dfc10f9b07dcd3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/imagesloaded.min.js?ver=3.2.0 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Fri, 10 Sep 2021 02:28:26 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 2575
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.12.1
200 OK 44 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.12.1
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 023b64cf34408d759969de1e6cd7a826
7148c0897975d70eba0921a06eb64074a8c7ee55
37043a49cc6841a7ec6901af4f3394bc3473540d53ed85d1b80a921fe5ff8c4c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.12.1 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:41 GMT
Content-Type: text/css
Last-Modified: Tue, 05 May 2020 13:02:26 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 43751
Date: Fri, 18 Nov 2022 06:04:41 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/plugins/js_composer/assets/lib/bower/isotope/dist/isotope.pkgd.min.js?ver=4.12.1
200 OK 10 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/plugins/js_composer/assets/lib/bower/isotope/dist/isotope.pkgd.min.js?ver=4.12.1
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (32003)
Hash f9f8991eaaaed99adf76b8edb0f0e141
d25663d2ec86413cf4d3117e0eaa3deb892d514a
b4b6f4f2f9b9b9d02f3e58c644fbd8413230a2c11f388676072b88068f83aa6d
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/js_composer/assets/lib/bower/isotope/dist/isotope.pkgd.min.js?ver=4.12.1 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 May 2020 13:02:27 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 10159
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery.touchSwipe.min.js?ver=5.4.12
200 OK 4.4 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/js/jquery.touchSwipe.min.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (13525), with no line terminators
Hash 69ad5bf56433fd892e78ef3db770b599
e5bcbc3d8fe2b73c2fdfb1ae203d84fe05baa057
d06440042d450f90c9c8986db01ac8f50e0889685998db6eff3aeac027ee5347
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/js/jquery.touchSwipe.min.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 27 Nov 2018 11:04:00 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 4445
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/js/custom.js?ver=5.4.12
200 OK 4.6 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/js/custom.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (1564), with CRLF line terminators
Hash 3a9c0f88e2d9f8eed5e7c42931f58831
33e1090452c01d9d212433a3f9cb1b9435d40bc4
fdc83b81c5eb93ce14a3d90ce44d1bbc88ae062794eddb1f7a4b224c2de1e2bb
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/js/custom.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 27 Nov 2018 11:03:58 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 4601
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-includes/js/wp-embed.min.js?ver=5.4.12
200 OK 765 B URL HTTP/1.1 www.abbmedikal.com/wp-includes/js/wp-embed.min.js?ver=5.4.12
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (1391)
Hash fe875afb236ee8f0d50040fe58d848d4
e6b1b67093b429c95d5b9db07a7eba39e02cf0e5
328a6a072b91134f2802ae25e070f38ff156ceee2c6ec6a6253ae4b27af73b49
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/wp-embed.min.js?ver=5.4.12 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Fri, 10 Sep 2021 02:28:26 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 765
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=4.12.1
200 OK 6.0 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=4.12.1
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (20648), with no line terminators
Hash 1bffbdb94d4301545f5b4db5c974463f
eeb5bc6685ce067684561ea6c6fddc249f10ebe1
a0b5f6d2c8840f4d48265fe03074086320819b72051cf3d880a938a06259a8ce
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=4.12.1 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 May 2020 13:02:26 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 5999
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/plugins/js_composer/assets/lib/bower/zoom/jquery.zoom.min.js?ver=4.12.1
200 OK 1.7 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/plugins/js_composer/assets/lib/bower/zoom/jquery.zoom.min.js?ver=4.12.1
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (5151)
Hash 7250eef7a85844d34093120ec4d3abad
1a00408a9b8a862cca1d44102dfb08475c22116f
f618f2a09fb15e7450ea797da493c9ad12efc398ea688264f6ea38aee48ffe88
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/js_composer/assets/lib/bower/zoom/jquery.zoom.min.js?ver=4.12.1 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 May 2020 13:02:27 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1717
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/plugins/js_composer/assets/lib/vc_image_zoom/vc_image_zoom.min.js?ver=4.12.1
200 OK 801 B URL HTTP/1.1 www.abbmedikal.com/wp-content/plugins/js_composer/assets/lib/vc_image_zoom/vc_image_zoom.min.js?ver=4.12.1
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (2216), with no line terminators
Hash 81b1bde2741c09f798d651168238e335
20c9220eabc9573efb403379818c0a88c943c329
22cc97025a96be70c1adf0e360097deaad818f90b08521843a12987bbcc82420
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/js_composer/assets/lib/vc_image_zoom/vc_image_zoom.min.js?ver=4.12.1 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 May 2020 13:02:27 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 801
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5HOTT+UqRpxNGQB/odvIWQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vHjW7y1nzc7a3m3K5YbWRolsbR4=
www.abbmedikal.com/wp-content/plugins/js_composer/assets/lib/waypoints/waypoints.min.js?ver=4.12.1
200 OK 3.1 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/plugins/js_composer/assets/lib/waypoints/waypoints.min.js?ver=4.12.1
IP
ASN #51557 Isimtescil Bilisim A.S.
File type ASCII text, with very long lines (9361)
Hash 2333950e56abe963d54106046a47272f
824d15ffa9ee11f20f67cd07bea79a4091766379
691ed393d41f0d8689478acd7b77af3cd8660d8bd43a5d197b8fb786b3f87aff
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/js_composer/assets/lib/waypoints/waypoints.min.js?ver=4.12.1 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: application/javascript
Last-Modified: Tue, 05 May 2020 13:02:27 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 3055
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/1.1 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.abbmedikal.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 30928
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 17 Nov 2022 16:55:19 GMT
Expires: Fri, 17 Nov 2023 16:55:19 GMT
Cache-Control: public, max-age=31536000
Age: 47364
Last-Modified: Mon, 11 Jul 2022 18:57:39 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
200 OK 25 kB URL HTTP/1.1 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25036, version 1.0\012- data
Hash 9dd150fb7229e143e0f71ba1fe8c8f63
664abfc4941054600213dda51a3d6f0d05b3c312
cffe139366b3882387dddbd10d59e7d9aa29345793fdbf51ddde809ca6a0bec2
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.abbmedikal.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 25036
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 06:19:25 GMT
Expires: Tue, 14 Nov 2023 06:19:25 GMT
Cache-Control: public, max-age=31536000
Age: 344718
Last-Modified: Mon, 11 Jul 2022 18:59:41 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
200 OK 31 kB URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Hash 3fe71527811fbfedd2c07962e1bc49e7
f63e158a0480c5d711b5e268db0e75e57d87a8a5
24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.abbmedikal.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 31320
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 15 Nov 2022 01:29:17 GMT
Expires: Wed, 15 Nov 2023 01:29:17 GMT
Cache-Control: public, max-age=31536000
Age: 275726
Last-Modified: Mon, 15 Aug 2022 18:11:37 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.abbmedikal.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 21:39:56 GMT
Expires: Tue, 14 Nov 2023 21:39:56 GMT
Cache-Control: public, max-age=31536000
Age: 289487
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT
Content-Type: font/woff2
www.abbmedikal.com/wp-content/uploads/2020/05/abb-logo.jpg
200 OK 22 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/uploads/2020/05/abb-logo.jpg
IP
ASN #51557 Isimtescil Bilisim A.S.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x133, components 3\012- data
Hash c9b75226e52c912c8a401f6df16f1270
9bbb090ed480d9bbf9a1ecbbdd96a2bce36611e0
5af460ca4c363c97278cfab72ea9b29a066878a5a959c4fc4f0181ff8def62ff
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/05/abb-logo.jpg HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 05 May 2020 12:39:57 GMT
Accept-Ranges: bytes
Content-Length: 21560
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/uploads/2020/05/abb-main-1-300x553.jpeg
200 OK 37 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/uploads/2020/05/abb-main-1-300x553.jpeg
IP
ASN #51557 Isimtescil Bilisim A.S.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x553, components 3\012- data
Hash 5dc75bcc7c9ebe5499e7f68b4856ff84
4f2c925c0831cf6418ac15ddbd02d5c21c039e83
eb46a6e0661700cb928043c4dc3a6395f9e3cf90ec5b16b088e084184aed5619
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/05/abb-main-1-300x553.jpeg HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 05 May 2020 13:34:45 GMT
Accept-Ranges: bytes
Content-Length: 37297
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/uploads/2020/05/abb-main-2-322x553.jpeg
200 OK 32 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/uploads/2020/05/abb-main-2-322x553.jpeg
IP
ASN #51557 Isimtescil Bilisim A.S.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 322x553, components 3\012- data
Hash 1ef2eb3de21abffc59504d141b6aae49
b14d1dacac06fdcb1039033e90af9c0ef2431a02
542cf8a02ac0b400144137514f2c2ed0bdd56387550629f9d8b3c4bad6cd0a8d
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/05/abb-main-2-322x553.jpeg HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 05 May 2020 13:36:33 GMT
Accept-Ranges: bytes
Content-Length: 31454
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/uploads/2020/05/14166.jpg?id=16
200 OK 35 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/uploads/2020/05/14166.jpg?id=16
IP
ASN #51557 Isimtescil Bilisim A.S.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Hash fdd03f1d489e37e655e58a447850d791
73d58c55d7e7eb215b7117e20635d4428c89d7cb
9b4a88ae52067f14cf3a11aaf377321918ebf130c54fee8ac41bbbdebf8135f1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/05/14166.jpg?id=16 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 05 May 2020 13:14:13 GMT
Accept-Ranges: bytes
Content-Length: 34953
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/uploads/2020/05/tibbi.jpg
200 OK 78 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/uploads/2020/05/tibbi.jpg
IP
ASN #51557 Isimtescil Bilisim A.S.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x425, components 3\012- data
Hash 2f44e584249ad3d69c2e0a4993abe36f
fcb61a62b9d242cb5bcca0fa1e27c5d88bfd8a59
a374d46ea834d60cf11ffd07456dd9cc91405dcf96fd06c4765f1e61f605e7be
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/05/tibbi.jpg HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 05 May 2020 12:40:09 GMT
Accept-Ranges: bytes
Content-Length: 78543
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/themes/TEMA/assets/fonts/fontawesome-webfont.woff2?v=4.6.2
200 OK 72 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/themes/TEMA/assets/fonts/fontawesome-webfont.woff2?v=4.6.2
IP
ASN #51557 Isimtescil Bilisim A.S.
File type Web Open Font Format (Version 2), TrueType, length 71760, version 4.393\012- data
Hash a1a450ea331a3fc89e867ecad963b6b2
ee59197f63a2c4c7b7f2ae135a745202235de8d4
2932abf996373e87fbf2e950876b1962f1b57db954a1643ea68831d9fbb74da4
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/TEMA/assets/fonts/fontawesome-webfont.woff2?v=4.6.2 HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.abbmedikal.com/wp-content/themes/TEMA/assets/css/font-awesome.min.css?ver=5.4.12
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: font/woff2
Last-Modified: Tue, 27 Nov 2018 11:04:00 GMT
Accept-Ranges: bytes
Content-Length: 71760
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
www.abbmedikal.com/wp-content/uploads/2020/05/isg.jpg
200 OK 117 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/uploads/2020/05/isg.jpg
IP
ASN #51557 Isimtescil Bilisim A.S.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 699x426, components 3\012- data
Size 117 kB (117294 bytes)
Hash 4b9b9598d608d53ae88c12eb2a53c473
7454e4e1d44712717b37d0a8f357283e246456d3
75c265fa8edd6afb036a112c22d8c05b6d4c43f9bde2ab374ecd0426afbecb9a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/05/isg.jpg HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:42 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 05 May 2020 12:40:07 GMT
Accept-Ranges: bytes
Content-Length: 117294
Date: Fri, 18 Nov 2022 06:04:42 GMT
Server: LiteSpeed
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8fede4bc1e6da3e8abee97b72d07979c
ec56e7b533bac2f4591720dcd97767e1d1a4205a
fe8ce579d4cde639c3adbef206d98a6403ed4949da6152eb944b9da5a25b0ed2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE8CE579D4CDE639C3ADBEF206D98A6403ED4949DA6152EB944B9DA5A25B0ED2"
Last-Modified: Wed, 16 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 18 Nov 2022 12:04:44 GMT
Date: Fri, 18 Nov 2022 06:04:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17232
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 06:04:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17232
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 06:04:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17232
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 06:04:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17232
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 06:04:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17232
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 06:04:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg
200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d0b6106f00f9fd8b89c2d484a559a1a
399ac393209dcdac7d2188d7aa8d95f04570ef7c
5d8151c9eb558f4a2b8bd2952c6845606ddb0c27e36f6e49aca7e60908cd9fe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e93b023-2729-4761-a4ea-05612c0917fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3759
x-amzn-requestid: 8c91ac59-89dc-4218-b69f-0cebb29f301b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-wJHgxoAMF-hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab33-4dac305614a92bc52c038222;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mb2-PTjNmt06Wd5jOjQ5WoLY-0NgI80CKPXtwgzBt4n5km8Pu_WN0Q==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:50:49 GMT
age: 29635
etag: "399ac393209dcdac7d2188d7aa8d95f04570ef7c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F484ffe7b-1073-4220-bf53-ccbfc7e9654e.webp
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F484ffe7b-1073-4220-bf53-ccbfc7e9654e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14649d486602810c1b218b96b27b2cc4
96c6cbfe31e7247c64dfa8c3759967627f8c6286
80f5d7573fd2bf4e6a6038ebf1335d159ad37c391ee539918455963d6ee88654
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F484ffe7b-1073-4220-bf53-ccbfc7e9654e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8884
x-amzn-requestid: 3739b8f5-bb0c-4798-a931-e955dd6df81d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-MiGFxoAMFlxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa50-74c24a2f737634b655a5b47c;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:32 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: d_bLYyZzi1phYwQ2e5uvUmzO0GuvNu9Ubi2PQ0ChilQJegKr3uUiRw==
via: 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:53 GMT
etag: "96c6cbfe31e7247c64dfa8c3759967627f8c6286"
content-type: image/jpeg
age: 29331
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93b326374b3808d0af42e295643cdc14
dd691328acf190c745465208f18a41a75878df18
224ac3995e2e78ee5fcc6c5c3d5fb1f4b0ceca1c42b7a1a493c756aa199bf75f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad6fa40-abda-4ea3-b899-aef6906a01e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: ba4e00c8-a996-41f3-b15a-1e304907ca2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9UpH1ioAMF6ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8ea-2f9f794c4de03f8b212e072f;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LPflGHjoeNg1X5EszKAaziaZsKFf5hT6LeNPpZQriZ5H1z7Zhh86Ow==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:57 GMT
age: 29327
etag: "dd691328acf190c745465208f18a41a75878df18"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: ae092a0a-1709-4497-9f07-0348a28d2491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqZOIEN7oAMFlaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637408c0-5ac595df302a8f1d3703ad8d;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:46:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: c_SJMaV3uYSUysTSOFV--jQqDUxw-fBp8cXWWUZw9vUjt0d6PsOpxA==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 18:45:44 GMT
age: 40740
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4998f097d23ee5f19cae27d5b938e5fc
4369c8ebe61b9944e639bb2731feb51c5a758fe7
5691c66766c9578e9c4aa71240608653821162c668abc63ee40e553ede2450e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6339
x-amzn-requestid: 0be5dee5-272d-4577-ba55-5cdb7935ea60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-MCExBoAMFz6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa4c-15fd613336aa6fcb165d0b26;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: NYs-Nf0PzWqhXP5nkvanTjhJ6vfwRIU--YD06RFIGPEuwDCu6fvEPg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 29524
etag: "4369c8ebe61b9944e639bb2731feb51c5a758fe7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d16e5ff718353c095d266b080fe547f
fa7c5c9a1d16355859196271f3d13f3850931888
9a94d8eb20cc56d0898b1e2b80c0006ebbef75c15ad94e907050c5be4e19a960
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10349
x-amzn-requestid: fc85e078-a81a-4fed-899e-15249961f59c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-7tHGLIAMF00Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7d-4224d193517794684fcdc0ad;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UK-XD_8EcfPwfLb-QVwfLr8aG-sqVBoUJcbPb5hKAlQS68eOxdgM5g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:03:27 GMT
age: 28877
etag: "fa7c5c9a1d16355859196271f3d13f3850931888"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.abbmedikal.com/wp-content/uploads/2020/05/fav.jpg
200 OK 9.9 kB URL HTTP/1.1 www.abbmedikal.com/wp-content/uploads/2020/05/fav.jpg
IP
ASN #51557 Isimtescil Bilisim A.S.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 114x133, components 3\012- data
Hash 3f73ad29010b9223c0a757ee2ef5304d
31454b51503edf43a7e22af5fc81b24b893551a5
67592b90f70fa90bc476e960917ffd2c8242f88bfccc6257e2ba5ea418249a34
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/05/fav.jpg HTTP/1.1
Host: www.abbmedikal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.abbmedikal.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Cache-Control: public, max-age=604800
Expires: Fri, 25 Nov 2022 06:04:44 GMT
Content-Type: image/jpeg
Last-Modified: Tue, 05 May 2020 14:14:52 GMT
Accept-Ranges: bytes
Content-Length: 9906
Date: Fri, 18 Nov 2022 06:04:44 GMT
Server: LiteSpeed
trick.cofounderspecials.com/track.js?v=9.999
404 Not Found 729 B URL HTTP/1.1 trick.cofounderspecials.com/track.js?v=9.999
IP
ASN #206638 PE Brezhnev Daniil
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 604eea713faef1ae8dafc0224112e662
89f4a04f3088b7fdb308cd0af944a38c6ed99c2b
3905c65876c7b7c1f0a8efae5c758b100d3903c2f94e7177285e898c80eb10f2
Analyzer Verdict Alert fortinet Malware
GET /track.js?v=9.999 HTTP/1.1
Host: trick.cofounderspecials.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.abbmedikal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 18 Nov 2022 06:04:45 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 29 Jul 2022 15:36:49 GMT
ETag: W/"5b0-5e4f36b22e013"
Content-Encoding: gzip
93.89.224.188
34.102.187.140
91.211.91.112
23.36.77.32
93.184.220.29
0.0.0.0