yildizsurucukursu.com/
185.15.196.168301 Moved Permanently 238 B IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bf0f218d472973220576542eea1ae6b9
3f015a3afb7562eb6f8402d5c567a193d24b6a96
89a50317e2e1eb169c04da56ccd07e428eb1360157bee34ca04aae96760d1a91
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 20 Dec 2022 13:24:51 GMT
Server: Apache
Location: https://yildizsurucukursu.com/
Content-Length: 238
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bbea1550fedd5eb9c265712fab75b137
2c2f981747898a380265f766345f2bb9c8c983fd
c728286e38c31a4d3f7a39702e0a5f69c14bf69e01a88bc4479714953fbda278
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C728286E38C31A4D3F7A39702E0A5F69C14BF69E01A88BC4479714953FBDA278"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3322
Expires: Tue, 20 Dec 2022 14:20:13 GMT
Date: Tue, 20 Dec 2022 13:24:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b8fbcd7ca1a893d05677318a8a198e7a
0851654c21f6e3741887e7deab8098c1dc56f33c
edbade5913ace2fcbb932922e9af69acb2e8759474a2eeaec216307247fea361
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDBADE5913ACE2FCBB932922E9AF69ACB2E8759474A2EEAEC216307247FEA361"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2989
Expires: Tue, 20 Dec 2022 14:14:40 GMT
Date: Tue, 20 Dec 2022 13:24:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 20 Dec 2022 12:34:26 GMT
content-type: application/json
age: 3025
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f4b32de26d9af2cba6afcdcf716d3fb8
644ead4436a8f2fc1f0dd25e4484b64f6ed63347
525123034cb53d750d5ebd487015911452d2cd3c34301e6628f2f52f3f0bfc88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "525123034CB53D750D5EBD487015911452D2CD3C34301E6628F2F52F3F0BFC88"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20943
Expires: Tue, 20 Dec 2022 19:13:54 GMT
Date: Tue, 20 Dec 2022 13:24:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VvNt0FUlFZYt9T5Xwbx01BJqKUJRUVyn5NT7p2tJ7dvHyrbSIcI5hXkyvdWy7Zs18ulhA5l7Uq3V+dVrvhUWoA==
x-amz-request-id: FS7TSXSW7RDZR67D
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 20 Dec 2022 12:29:26 GMT
age: 3325
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:51 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 20 Dec 2022 13:08:02 GMT
age: 1009
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d0c2b6760f2b58f445446dd2276d5af4
aeedf417b1ebde86ce837ca02ba934abb938b1a4
8fe72d0ce839150559da5ddf46bf87d26b6b9cbe34d09641b29a53be24997c81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4910
Cache-Control: max-age=162229
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:52 GMT
Etag: "63a17b2b-1d7"
Expires: Thu, 22 Dec 2022 10:28:41 GMT
Last-Modified: Tue, 20 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.89.217.163101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.217.163:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3QKqezCRxzAj4r7AxCyyyQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: btMY/HLqEG1DZRtK7Yflv1f3PfQ=
yildizsurucukursu.com/
185.15.196.168301 Moved Permanently 0 B IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Tue, 20 Dec 2022 13:24:51 GMT
Server: Apache
X-UA-Compatible: IE=edge
X-Redirect-By: WordPress
Location: https://www.yildizsurucukursu.com/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19495
Expires: Tue, 20 Dec 2022 18:49:48 GMT
Date: Tue, 20 Dec 2022 13:24:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19495
Expires: Tue, 20 Dec 2022 18:49:48 GMT
Date: Tue, 20 Dec 2022 13:24:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19495
Expires: Tue, 20 Dec 2022 18:49:48 GMT
Date: Tue, 20 Dec 2022 13:24:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19495
Expires: Tue, 20 Dec 2022 18:49:48 GMT
Date: Tue, 20 Dec 2022 13:24:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 045f016fb66e6e0d1da1fb742d9b19a7
8f98bf2cedfccfce71464a733e2fd37482fd71c2
593cf38d1c2c315ff23fcda60e41141caa0266874f36a0c517554ca01ea51f12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9216
x-amzn-requestid: 460a95bf-5724-4bea-b6c1-f6ce263da5e7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabq8FXboAMFwCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d979-70340469247cdcf952a98c3e;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:36:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: utr-CdnBX5-MjBHX3PW6rdC06JzmIvfrj9FOrQtOUDd91_Fo4wVzGg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 a3b5bb90516201e5ddd137696b7b0f50.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 21:45:55 GMT
age: 56338
etag: "8f98bf2cedfccfce71464a733e2fd37482fd71c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b99ff1-3a90-4792-98d7-d8a29855c0b3.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b99ff1-3a90-4792-98d7-d8a29855c0b3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 49a98c00b1949e152b5f31c588a76a63
1315068dfd111f24e39d14434c719ef10328bfbf
6f67099495261e1114eeca46d2afd3c0bc6921fbc20a6e3e78c4af5d1c9edbc2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b99ff1-3a90-4792-98d7-d8a29855c0b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9593
x-amzn-requestid: 3a50abdf-4974-4f53-bdc6-5c15a84fea65
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: da6rNHYQoAMFdzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a10b14-40a012f068ef226f07b54875;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 01:08:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: vr3KPzYtoXK8ovd6YeEi1sRG-q4ukS9YoGtJeT44Wu5E-yvDTfP5Fg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 01:28:13 GMT
age: 43000
etag: "1315068dfd111f24e39d14434c719ef10328bfbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c7ac0b5738bab6b4ed770c26ca922250
e56fd4ee2f5354a54a6271db2be528f98eecd3d7
5997d5be6bbeb189ef08af2f6c6dd5bb0cfa70ad7b40daab8712efe5adc2c6e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8450
x-amzn-requestid: a9f11c68-8327-46ba-9075-e316a2f9fdbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabr3FoSIAMFdtQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d97e-61b788f5675fe0e815e1e967;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:37:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: _nupdrdRDG-S085FRNoJgzDQVg9Ngb_nYDR5C1AkkterWy8vlXBxGw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ac463f3377446e4c603deca30feb744a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 21:45:54 GMT
age: 56339
etag: "e56fd4ee2f5354a54a6271db2be528f98eecd3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e977b0b-6e7d-42dd-9743-5064708ab1e0.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e977b0b-6e7d-42dd-9743-5064708ab1e0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b5da803c751be159f0f5b3c2f65bd2b6
39139480cfc2ed0781b51745bfaabed4490aa0db
920ee464843101c638327866fbfcc9c7f00fc19b7cdbc8948fbe53d2b6fb4ed3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e977b0b-6e7d-42dd-9743-5064708ab1e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7876
x-amzn-requestid: 668c95f2-a1b1-4abd-9f4e-23d05c4998a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: da270EFlIAMFR5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a10518-56d6db4f4cff1b4e08b87046;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 00:43:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: U9cES2VDr79vF5gBfhG-5ZyHa8WVqEti4ZGHsBerkxIkeSWsPhC-jA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 01:06:15 GMT
age: 44318
etag: "39139480cfc2ed0781b51745bfaabed4490aa0db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32317940-ae19-4605-9c38-d5a5b6285d7c.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32317940-ae19-4605-9c38-d5a5b6285d7c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f99b0b02f5f097b2c6ab2f1dc5a398b0
c7e06d6c394bb9b0ad768017af7479e909628263
36d003689047f2b21f29eedffd989acb3906b666ea0773ec889ac67b33bd11b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32317940-ae19-4605-9c38-d5a5b6285d7c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8200
x-amzn-requestid: 59110600-74a3-4fec-9c5b-190a36d9af4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabr2F_mIAMF0AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d97e-7953e2774dafb8e67e9f64d8;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:37:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: T7cFVnnB2rayrGzNYVg0ykK5o32XAoAu83oeAALZ0JoRPcrjrvUGQw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 58b8655e3ea662bad02cac6b9d4c88ba.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 21:51:49 GMT
age: 55984
etag: "c7e06d6c394bb9b0ad768017af7479e909628263"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfd0e913579b4ff2f511223d70cb01fb
497e0ffef816e100e6ddc221ec17d5f389c1142a
bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _WKAnv-iFrsEA9lFq4adBmRVdSk9-FQVF_cFCDhpM1_LMDdt_vPwhQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 21:39:07 GMT
age: 56746
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/css/classic-themes.min.css
192.0.77.37200 OK 217 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/css/classic-themes.min.css
IP 192.0.77.37:0
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /c/6.1.1/wp-includes/css/classic-themes.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: text/css
content-length: 217
last-modified: Tue, 25 Oct 2022 13:45:16 GMT
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/
185.15.196.168200 OK 136 kB URL HTTP/1.1 www.yildizsurucukursu.com/
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (20349), with CRLF, LF line terminators
Size 136 kB (136422 bytes)
Hash 4dd4ddb5c7d193a6486d7e2ca19f845d
20d391dd450eb5707481840003f71c936b18cb0f
d4bccf33d1afb92b61e17286388a46d4950e9a9cb0fe73cb5dfeaa277bdfa378
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:53 GMT
Server: Apache
X-UA-Compatible: IE=edge
Link: <https://www.yildizsurucukursu.com/wp-json/>; rel="https://api.w.org/", <https://www.yildizsurucukursu.com/wp-json/wp/v2/pages/8>; rel="alternate"; type="application/json", <https://www.yildizsurucukursu.com/>; rel=shortlink
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0dc23a845daadd984dd46924d80efb81
8b6ac466ee633c3a3a2eff65bd60dcb6097e5c75
3f3ebc1214709374a862beef3041aec51861f5fa7377f12710853bf31c772c58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.yildizsurucukursu.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.1
185.15.196.168200 OK 2.8 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Hash 443a0083792b1ca61e8116184cb5901e
03c1b038741f1e9e75d3d7b006d6e3b2744e0b85
9a38595d63dfae35b88183515b69f8b742128b564b9ea4dbd79908c3aa73921a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:32 GMT
Accept-Ranges: bytes
Content-Length: 2803
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/themes/yildizwp/layout.core.js
185.15.196.168200 OK 4.7 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/layout.core.js
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Hash 99b299292aaa23997a9d3709ffbca5ba
575c8915769cf0e6a05bfbec74a8547287185de3
a23daf079f36917c1acf798ddf14f0fb55e60f14b8bb0fbc37129dbb349eaa23
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/layout.core.js HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Fri, 07 Sep 2018 20:02:00 GMT
Accept-Ranges: bytes
Content-Length: 4702
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0dc23a845daadd984dd46924d80efb81
8b6ac466ee633c3a3a2eff65bd60dcb6097e5c75
3f3ebc1214709374a862beef3041aec51861f5fa7377f12710853bf31c772c58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.yildizsurucukursu.com/wp-content/plugins/social-media-buttons-toolbar/inc/css/frontend.css?ver=5.0
185.15.196.168200 OK 2.5 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/social-media-buttons-toolbar/inc/css/frontend.css?ver=5.0
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Hash c33be421e5ec2da2e8fbf52e59492896
e8a66ebdc3865764c42b031346448163e71cfc04
361f6c6163505f8b68a364747f0904fb6b1affa2f5242cb5404f0fff459d36e1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/social-media-buttons-toolbar/inc/css/frontend.css?ver=5.0 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Sat, 15 Oct 2022 01:26:51 GMT
Accept-Ranges: bytes
Content-Length: 2459
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/themes/yildizwp/CloudZoom.js?ver=1.0.512
185.15.196.168200 OK 19 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/CloudZoom.js?ver=1.0.512
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Hash 42bb50aabd9f3e7ea0b60d88fe453657
fe8af6b6c218de7108f0e6d0d2728c9dabe51a26
5fbe385551f43a1dfb80e1dd7d274ef34c83be6acaaae6fa8941f503765edc55
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/CloudZoom.js?ver=1.0.512 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Fri, 07 Sep 2018 20:02:00 GMT
Accept-Ranges: bytes
Content-Length: 19352
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/wp-pro-quiz/css/wpProQuiz_front.min.css?ver=0.37
185.15.196.168200 OK 11 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/wp-pro-quiz/css/wpProQuiz_front.min.css?ver=0.37
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (10932), with no line terminators
Hash 7a63fc2d626c32ebcc34fb79c4d248e5
a9bc455a8fa02348c463c5123c544a4b45ac94dd
294494f66f4538628d463f30a44f13bf7808ae42d634e2381ee4a838b1cd7156
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/wp-pro-quiz/css/wpProQuiz_front.min.css?ver=0.37 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Sun, 21 Jan 2018 10:14:04 GMT
Accept-Ranges: bytes
Content-Length: 10932
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/social-media-buttons-toolbar/inc/lib/bootstrap-tooltip/bootstrap-tooltip.css?ver=5.0
185.15.196.168200 OK 2.6 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/social-media-buttons-toolbar/inc/lib/bootstrap-tooltip/bootstrap-tooltip.css?ver=5.0
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Hash 2b56702a3a20e6f61717421431a1ecca
733709fd2f78a9da8529d682fe7ac619569bce35
566f898f5dcab8b9bfc2ddab06cbf201e3fee3ee280e78922a44f57b95127b42
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/social-media-buttons-toolbar/inc/lib/bootstrap-tooltip/bootstrap-tooltip.css?ver=5.0 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Sat, 15 Oct 2022 01:26:51 GMT
Accept-Ranges: bytes
Content-Length: 2575
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/tablepress/css/default.min.css?ver=1.14
185.15.196.168200 OK 5.1 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/tablepress/css/default.min.css?ver=1.14
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (5092), with no line terminators
Hash 323c6e56cf6861fe0acba0ea0c350d4a
d9d754d1997436f8f3659385e19fc8202b1da7d2
97ce1e1f5dbfda35ac979b593e79e1673a3e725790339d767e4a6ca6e94a4828
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/tablepress/css/default.min.css?ver=1.14 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Fri, 23 Jul 2021 09:41:59 GMT
Accept-Ranges: bytes
Content-Length: 5092
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8
185.15.196.168200 OK 40 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type Unicode text, UTF-8 text, with very long lines (5178), with CRLF line terminators
Hash 3562402588e3bd6410012cf058d1948c
16685faf56b7ab684f50cd6876e4b2ac2c102545
23a57aed407545bd964231bcb511674996bdd28a4f2a57ca66bca72de0bf3d2d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.8 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Fri, 07 Sep 2018 20:17:46 GMT
Accept-Ranges: bytes
Content-Length: 39750
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.9.1
185.15.196.168200 OK 9.9 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.9.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (9895)
Hash d4eed5caa2652601a1015b25c0449015
993e529697bd7683c98073a2606d03f16577b48f
81aa28e1d4f2269c39cd849f8b3189a7d738745711549a5f0218b1bba8264c13
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.9.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 9934
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
185.15.196.168200 OK 19 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (19233)
Hash d183c598fd582fe997f6782afed84f9b
7799820e0e849e8484543c3360a8d8cc62baa32f
83059e4c1a5c210e5585d96779fe655170817193d43e247c78dffaae7b7ba3a9
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 19279
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 0dc23a845daadd984dd46924d80efb81
8b6ac466ee633c3a3a2eff65bd60dcb6097e5c75
3f3ebc1214709374a862beef3041aec51861f5fa7377f12710853bf31c772c58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.yildizsurucukursu.com/wp-content/uploads/elementor/css/post-1094.css?ver=1635710594
185.15.196.168200 OK 949 B URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/elementor/css/post-1094.css?ver=1635710594
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (949), with no line terminators
Hash b9213898bb0d40a5377a2e98e313b0a5
0147538d272570df33defec1d624bc411b17745a
a034e4afd480cce897ed9c6221080c6e63fad4126fd936583877f12288d760ba
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-1094.css?ver=1635710594 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Sun, 31 Oct 2021 20:03:14 GMT
Accept-Ranges: bytes
Content-Length: 949
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/uploads/elementor/css/post-8.css?ver=1653131750
185.15.196.168200 OK 19 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/elementor/css/post-8.css?ver=1653131750
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (18609), with no line terminators
Hash 4523059434330572d13e0235ab7d5371
80daba9d0f532c739ce5797f8885ef30c18aa7f6
d1d21b4d7364c82f0d72d73637c011ea8bf42aa5387478e6bbf775b44d3ea16d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-8.css?ver=1653131750 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Sat, 21 May 2022 11:15:50 GMT
Accept-Ranges: bytes
Content-Length: 18609
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/themes/yildizwp/bootstrap.min.css?ver=1.0.512
185.15.196.168200 OK 91 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/bootstrap.min.css?ver=1.0.512
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (65393)
Hash 92629378e803b86ab7e8371d03181a26
8caa8954af8cc00a36403746aebee7c204359df2
52b04903a3fe7786ff5f32fc4c1817876337c4803cc3cd46664976a7919e0f4c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/bootstrap.min.css?ver=1.0.512 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 07:29:44 GMT
Accept-Ranges: bytes
Content-Length: 90970
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.9.1
185.15.196.168200 OK 59 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.9.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (59158)
Hash 74bab4578692993514e7f882cc15c218
b6293bcfd851f963edbe859498570c4c0c7eaae4
d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.9.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 59344
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.9.1
185.15.196.168200 OK 27 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.9.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (26516)
Hash c55205bce667f5d812354fd1353e7389
f22de0af271eba636a022c873c94fbcd81b4c89a
c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.9.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 26702
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/themes/yildizwp/jquery.js?ver=1.0.512
185.15.196.168200 OK 286 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/jquery.js?ver=1.0.512
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Size 286 kB (286495 bytes)
Hash aa0bf26e976aef1fad4a9db4c587f206
96ce5bab0373dfc441fb78b2560e75f9a0e39d23
ca1fb10c046a358c83736b149d70f009b684389d550038b997538f2c6ac3eee3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/jquery.js?ver=1.0.512 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Fri, 07 Sep 2018 20:02:00 GMT
Accept-Ranges: bytes
Content-Length: 286495
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js
192.0.77.37200 OK 4.5 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (11126)
Hash fb906ef2de9b58a7bb3d140030664bb3
5e2f807df9336133a72a916b34a6e0c0cc271060
7089583712a83002d70710920839c76e0166e3ff721ca30de1614701d6dbdb09
GET /c/6.1.1/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-encoding: br
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=23139749
185.15.196.168200 OK 22 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=23139749
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (22153), with no line terminators
Hash 9375b03600cb9296ecdcbeab2769a914
1b4e558873a0c01fa534ed2db2460ae652e3e4b9
970a471f91ad8bc60848134b6630c76d5300caa1e88e6ebed454174022dec0af
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=23139749 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 20:03:38 GMT
Accept-Ranges: bytes
Content-Length: 22153
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/social-media-buttons-toolbar/inc/lib/bootstrap-tooltip/bootstrap-tooltip.js?ver=5.0
185.15.196.168200 OK 20 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/social-media-buttons-toolbar/inc/lib/bootstrap-tooltip/bootstrap-tooltip.js?ver=5.0
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Hash 1fb0427308a381c6b59cbbbf57178fc0
c502db3e45ca6baeb01f856e7da3216818922085
a629e5af8040873fb4ae3f102e78638e764bb81e3bfcb9b0caa7415439ed0351
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/social-media-buttons-toolbar/inc/lib/bootstrap-tooltip/bootstrap-tooltip.js?ver=5.0 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Sat, 15 Oct 2022 01:26:51 GMT
Accept-Ranges: bytes
Content-Length: 20443
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8
185.15.196.168200 OK 114 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (27287), with CRLF line terminators
Size 114 kB (114288 bytes)
Hash f3643c9634c57e4e7c96229ac8126015
591ec87fb4d46f9d8b2bbbae6fa482dac855c025
7783007aac61f83ed2aac6e913a923ba859605a0fc93784f63d4772689566e77
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Fri, 07 Sep 2018 20:17:46 GMT
Accept-Ranges: bytes
Content-Length: 114288
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/themes/yildizwp/bootstrap.min.js?ver=1.0.512
185.15.196.168200 OK 33 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/bootstrap.min.js?ver=1.0.512
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (28941)
Hash 9fd615296694761593740d5b624de546
2e75e66269e4e1bc1223f18e0d430e8661101e77
747eff0f780808ebdef1a3683bcb9342da71c07136e60ad9c1829b89eaa6d2f5
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/bootstrap.min.js?ver=1.0.512 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Fri, 07 Sep 2018 20:02:00 GMT
Accept-Ranges: bytes
Content-Length: 32870
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.1
185.15.196.168200 OK 15 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (14869)
Hash 7a5dea0a705cc2f4cd87dbaaa6666bc6
678bc6f750f13adb29bbc158eb0d9cd813b736fa
97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.9.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 15055
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8
185.15.196.168200 OK 69 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (64636), with CRLF, LF line terminators
Hash 2775019adb3193a2ce34194abc6f43d5
b96441ef77fedafebc57ca482b91e02d45492eed
cca841fd2bca5b05c4e1d9a3a97fb1217771d732a3945a83b5c91bf4eda18931
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.8 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Fri, 07 Sep 2018 20:17:46 GMT
Accept-Ranges: bytes
Content-Length: 68673
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=23139749
185.15.196.168200 OK 45 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=23139749
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (41256)
Hash f25032157ef1e08fb86b25e3fbf9d283
151f406ab8781a9515fa56ec5d8236d2f5ca3eff
c57debaffa8cec25f3966adae16a6f1c5f73b7de0a443524099c210b0f1f9dae
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=23139749 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 20:03:38 GMT
Accept-Ranges: bytes
Content-Length: 44958
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=23139749
185.15.196.168200 OK 117 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=23139749
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (65536), with no line terminators
Size 117 kB (117263 bytes)
Hash 39e8b5e1e5833148e0095d38d91de576
41c512e5a7f6725edd3b2615db3c8c755ad5517f
73a07779d4175723314a0358ee7d0d7666f0726c00431419f0675aac6cc94bb8
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=23139749 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 20:03:38 GMT
Accept-Ranges: bytes
Content-Length: 117263
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=23139749
185.15.196.168200 OK 17 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=23139749
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (13240)
Hash 79fcf8cd0579e8137db22c411e6f4b33
7f6f3ee436bd0d2719c23c7e00cc6c66bc4f2745
c0de3c818d08543c64776f68525504b3c7aba372d24a609eec805cfbb8eebd12
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=23139749 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 20:03:38 GMT
Accept-Ranges: bytes
Content-Length: 16942
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=23139749
185.15.196.168200 OK 5.0 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=23139749
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (1270)
Hash df498482de493574eac465cc8b7f7467
c0e9173dc0e68beab0d6a118b65725df207f4999
49454e58187488db63f3bc1bdc7771fba8d4fda2c2ff266fcf9dace8a61da470
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=23139749 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 20:03:38 GMT
Accept-Ranges: bytes
Content-Length: 4972
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js?ver=23139749
185.15.196.168200 OK 9.1 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js?ver=23139749
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (5437)
Hash 0fafa74277bd4fa2bfd0d17f22768f84
d897afaf6ca03ddf3f057895531667cf044b0fd8
51eac3595cb78c3916271cafe940f8b0fd940798288323654cfe4adab80b97c9
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js?ver=23139749 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 15 Nov 2022 20:03:38 GMT
Accept-Ranges: bytes
Content-Length: 9139
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/themes/yildizwp/style.css?ver=1.0.512
185.15.196.168200 OK 555 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/style.css?ver=1.0.512
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Size 555 kB (555016 bytes)
Hash c66a7947c8fe2332433cc3871fbc7794
1a922241c4c167347b14612db58d73ffde807011
3c9160714f43736567e065846c47b4a89e96538303d75e99cc5ab88694bcdb85
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/style.css?ver=1.0.512 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 07:29:48 GMT
Accept-Ranges: bytes
Content-Length: 555016
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.1
185.15.196.168200 OK 18 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (10019)
Hash 4601ba55044413706c2022cb6c1c3d05
5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec
fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 18468
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.1
185.15.196.168200 OK 13 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type HTML document, ASCII text, with very long lines (12652), with no line terminators
Hash f57435a927d422043befe66bd74f4d68
4a2f90016ca54d0938263c50b8995bf889f6278b
f84293668b02b8c83c20c5c2cf51f8a5a64ac5a15d34be26c85382496b107700
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:32 GMT
Accept-Ranges: bytes
Content-Length: 12652
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.1
185.15.196.168200 OK 11 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (10565), with no line terminators
Hash 7f0734e228d3f1a255a8b817a5005b8e
3dfca70a7a3e298fc392f2393ca60d350eebb5fd
23bb39b607b39a93d953762d2a618a3cbc69c52ceaf70d96890137ca1d2b0228
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:32 GMT
Accept-Ranges: bytes
Content-Length: 10565
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
192.0.77.37200 OK 7.4 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css
IP 192.0.77.37:0
File type ASCII text, with very long lines (11256), with no line terminators
Hash f2b6674a2d2c00e99c8347f1bb5db6dd
d7a07595ce41c9a1e0bb055192ccec0e8f778052
4c7481717a7fc61d3e2d0d28917a1c972a89f5fcdc4a9c171887220aa589b9e1
GET /c/6.1.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
content-encoding: br
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.1
185.15.196.168200 OK 32 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type Unicode text, UTF-8 text, with very long lines (31482)
Hash e2c8dac9a1d5d631379ca15ba824a2d5
74306e359122ecf951396a852a1c06381a03fa9d
132858a7a793814411def5f66c77fb9be9436be9bb8be5b8a55ca16630aaaa78
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 31522
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
185.15.196.168200 OK 12 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (12198), with no line terminators
Hash 3819c3569da71daec283a75483735f7e
ecd40a5cc6f0b76200c454ca880210dc301cfab8
214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 12198
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
185.15.196.168200 OK 139 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (65280)
Size 139 kB (139153 bytes)
Hash 15bb2b8491fc7e84137d65f610e1685a
cd76b70a5426893e9c022b9a75c50a7c1348e2d0
b23f49f504faa32aac548b6662ffd64412f6738496fab8be38da46c5b7121804
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 139153
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
c0.wp.com/p/jetpack/11.6/_inc/build/photon/photon.min.js
192.0.77.37200 OK 2.9 kB URL HTTP/2 c0.wp.com/p/jetpack/11.6/_inc/build/photon/photon.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (685), with no line terminators
Hash 9783264f9dff29441192e0f9d3634b16
3b6ce9a06ab3da30999f6d4644cf42e6182800d7
29bb9f9cc2d6203586dffce6a5143df42c524368691df33e804b4a8d518f88ea
GET /p/jetpack/11.6/_inc/build/photon/photon.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 07 Dec 2021 16:56:47 GMT
content-encoding: br
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
185.15.196.168200 OK 11 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (10544)
Hash 4eee50ac6f4f364ba3a284d0753ddae3
a8e7e824e6824ae0b370ff36e2c07ca07276fae0
b936db5880aa9b6b2f26a8d32fc2b689fb75f69d971b94194f16dba801221ffe
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 10682
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.1
185.15.196.168200 OK 41 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type ASCII text, with very long lines (40657)
Hash 3073c641d7f23bf458a25a5d521bedd1
791c84ecbf6d2695df69c0ea90ac3e2a7a6fcf65
883dff47fea6a3a5858d9fc03d0fdca51571bf1c25153c45725fdef2a89c0f1e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 40696
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
c0.wp.com/c/6.1.1/wp-includes/css/dist/block-library/style.min.css
192.0.77.37200 OK 56 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/css/dist/block-library/style.min.css
IP 192.0.77.37:0
File type ASCII text, with very long lines (47826)
Hash a60c98641b46e66d7b4ef2ea33a16bb1
e18d8826db461ec5e3b90179b2d543d758073c3a
a170fa1c6d05bf139b513cb103e7a9a172d9ed370fda520bb07fb7bc6b19d49c
GET /c/6.1.1/wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 11 Nov 2022 14:56:45 GMT
content-encoding: br
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
stats.wp.com/e-202251.js
192.0.76.3200 OK 22 kB IP 192.0.76.3:0
File type ASCII text, with very long lines (2690)
Hash e78f17a1b1a179fd1278618112f2307b
09f7de645728516c270d3bc4f8ba73b4b4d01fc3
867ff598deba9db8916d183234f9f7541b3224ad3e89a85bd7a52325a1d93d21
GET /e-202251.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Sun, 10 Dec 2023 23:28:49 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/themes/yildizwp/images/53c55a74f42ca7bc9c88e700d85ec6a9_yildizsurucukursulogo.png
185.15.196.168200 OK 28 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/images/53c55a74f42ca7bc9c88e700d85ec6a9_yildizsurucukursulogo.png
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type PNG image data, 707 x 403, 8-bit/color RGBA, non-interlaced\012- data
Hash 2a16933c48e4b9a2837502da0b2fdb65
d389a0333da57f5b8672748cf9e4f454711396c4
0fe1aaf659dd432552eea4068ec2df3c6d88310713dfb82c49efdee9c508dc0a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/images/53c55a74f42ca7bc9c88e700d85ec6a9_yildizsurucukursulogo.png HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Thu, 13 Jun 2019 11:25:56 GMT
Accept-Ranges: bytes
Content-Length: 28157
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 33b3e9caf6728c5b916ec1ffee5ce0b3
06dccffaf379bc6709ca42d408ae530d8a14ef83
2ed45ebc478006d7657cd42f5779635c871a5919efa7a6d7ed3a3fa344089360
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 4f05977a009dd740d1f82894bb649d6f
a6e1a419deff5fc86ffa4fc7991435ec1578233a
6cc36a336c232d9d1823ea0bec9acaf4744f0f1b9648cdd21ce44d294e9cb576
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.yildizsurucukursu.com/wp-content/themes/yildizwp/images/cf9e671f3c3cd9ffd710a7ef13238d42_butonustsagbanner.png
185.15.196.168200 OK 136 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/images/cf9e671f3c3cd9ffd710a7ef13238d42_butonustsagbanner.png
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type PNG image data, 650 x 160, 8-bit/color RGBA, non-interlaced\012- data
Size 136 kB (135627 bytes)
Hash e0a784d8c8b0e42c4a95ae1f0d643c8d
92553ba8adc113240c9e5fea9d301f10a568b297
669e0ea2aeb70170ccfccbc15f8691863f0bec13281f90107319bf494d5ae866
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/images/cf9e671f3c3cd9ffd710a7ef13238d42_butonustsagbanner.png HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/wp-content/themes/yildizwp/style.css?ver=1.0.512
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Fri, 07 Sep 2018 20:06:37 GMT
Accept-Ranges: bytes
Content-Length: 135627
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
www.yildizsurucukursu.com/wp-content/uploads/zemin-01.jpg
185.15.196.168200 OK 12 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/zemin-01.jpg
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x150, components 3\012- data
Hash eff35022b11e63813c81b76a256882bc
4b3dcfd69e55cb70ea1f42a6e2b6e7fec89adf4e
c759cf12dc13acb2ca1aa4a7ceddc093e78960bc3cbd252b1ec0ef939aaf3342
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/zemin-01.jpg HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/wp-content/uploads/elementor/css/post-8.css?ver=1653131750
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Sun, 09 Sep 2018 15:09:07 GMT
Accept-Ranges: bytes
Content-Length: 12203
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
maps.google.com/maps?output=embed&q=BE%C5%9E%C4%B0KTA%C5%9E%20YILDIZ%20S%C3%9CR%C3%9CC%C3%9C%20KURSU&z=18&t=m&hl=English
142.250.74.46301 Moved Permanently 343 B URL HTTP/2 maps.google.com/maps?output=embed&q=BE%C5%9E%C4%B0KTA%C5%9E%20YILDIZ%20S%C3%9CR%C3%9CC%C3%9C%20KURSU&z=18&t=m&hl=English
IP 142.250.74.46:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 502459f45ba48b164967a89b426c4bc3
14c361ff34c8e99908039bf5d84009852c1805b8
d3d3ccb8220b502f0de2539a919e3df58a429c1001d73a18a3c5cbd544e5aae2
GET /maps?output=embed&q=BE%C5%9E%C4%B0KTA%C5%9E%20YILDIZ%20S%C3%9CR%C3%9CC%C3%9C%20KURSU&z=18&t=m&hl=English HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 20 Dec 2022 13:24:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1zQkXFnsSwS1RBxZ4gWUlMRElaIFPDnFLDnEPDnCBLVVJTVQ!5e0!6i18!3m1!1sEnglish!5m1!1sEnglish
content-type: text/html; charset=UTF-8
server: mafe
content-length: 343
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 384a2b2f97397ee2741922068da5bdcd
256bcaf0f153a739623feb917ad1c8745b7a3651
541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-KC59THN
142.250.74.168200 OK 56 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KC59THN
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash 7fd0689ff6d6d3f8247c1372692e50c2
7ec0d6e2070f38789eed4b1526670d3d5e3b8bde
79ed0b69cf4844d536007c08ec68f621dc8720843f97a9863c7aa0b1a17fb554
GET /gtm.js?id=GTM-KC59THN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 20 Dec 2022 13:24:57 GMT
expires: Tue, 20 Dec 2022 13:24:57 GMT
cache-control: private, max-age=900
last-modified: Tue, 20 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55536
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 384a2b2f97397ee2741922068da5bdcd
256bcaf0f153a739623feb917ad1c8745b7a3651
541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 18:52:41 GMT
expires: Tue, 19 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 66736
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:33:54 GMT
expires: Thu, 14 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 496263
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
216.58.207.227200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:42:24 GMT
expires: Thu, 14 Dec 2023 19:42:24 GMT
cache-control: public, max-age=31536000
age: 495753
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?display=swap&family=Roboto%3A300%2C400
142.250.74.106200 OK 76 kB URL HTTP/2 fonts.googleapis.com/css?display=swap&family=Roboto%3A300%2C400
IP 142.250.74.106:0
Hash 9f89dc8b6d91a9e186b0b7192cfd220e
082fdef76636ba6e2b478c1fc5e7ff585ea99ee6
e684a68483413daf6944c4d53dabb23601897f3e0101f35f20db3dd74032af6b
GET /css?display=swap&family=Roboto%3A300%2C400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Dec 2022 13:24:56 GMT
date: Tue, 20 Dec 2022 13:24:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/dancingscript/v24/If2RXTr6YS-zF4S-kcSWSVi_szLgiuE.woff2
216.58.207.227200 OK 42 kB URL HTTP/2 fonts.gstatic.com/s/dancingscript/v24/If2RXTr6YS-zF4S-kcSWSVi_szLgiuE.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 42404, version 1.0\012- data
Hash 68a0c578810054f9357521a1930f3eee
90243174fef8bbad60a3d45e07e1f3d19f29c490
44f79d6564067d847cea0ab32624f0db3a4a3a4a0daedee4e5efbad531c88fac
GET /s/dancingscript/v24/If2RXTr6YS-zF4S-kcSWSVi_szLgiuE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 42404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Dec 2022 09:20:39 GMT
expires: Wed, 20 Dec 2023 09:20:39 GMT
cache-control: public, max-age=31536000
age: 14658
last-modified: Mon, 11 Jul 2022 20:34:29 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/dancingscript/v24/If2RXTr6YS-zF4S-kcSWSVi_szLuiuEViw.woff2
216.58.207.227200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/dancingscript/v24/If2RXTr6YS-zF4S-kcSWSVi_szLuiuEViw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 22208, version 1.0\012- data
Hash f2c9284adbcd391204377382c31bcbd4
4af68fc72cae2ed02b95395152fd76a539e5dbd3
d1b7889978944d05819617952ff47a24a1cb5afa9d4c076d4109e63b76d06b02
GET /s/dancingscript/v24/If2RXTr6YS-zF4S-kcSWSVi_szLuiuEViw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22208
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 19:30:35 GMT
expires: Wed, 13 Dec 2023 19:30:35 GMT
cache-control: public, max-age=31536000
age: 582862
last-modified: Mon, 11 Jul 2022 20:28:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
216.58.207.227200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 11824, version 1.0\012- data
Hash deb26e9b1a25438118e5d39d741ae6b6
a2801defb4c8bed8e4083dfde0b2a5a9c0537020
fc66f942651a9fe1a598770d3d896529dcd7a03d02f40655451513093103e61b
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Dec 2022 22:25:27 GMT
expires: Sun, 17 Dec 2023 22:25:27 GMT
cache-control: public, max-age=31536000
age: 226770
last-modified: Wed, 11 May 2022 19:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
216.58.207.227200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:12 GMT
expires: Sat, 16 Dec 2023 13:33:12 GMT
cache-control: public, max-age=31536000
age: 345105
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 384a2b2f97397ee2741922068da5bdcd
256bcaf0f153a739623feb917ad1c8745b7a3651
541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 384a2b2f97397ee2741922068da5bdcd
256bcaf0f153a739623feb917ad1c8745b7a3651
541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/close-envelope.png?resize=30%2C30&ssl=1
192.0.77.2200 OK 336 B URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/close-envelope.png?resize=30%2C30&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8815becd76eadbb9f3636e8a2c55900e
3dde9998dbc2d80f8440474e0efd3c3ab22f3ed0
f23911e7ed2d5c04b3a68598ce5c218871d3dfbdded4f4352a59ee360622051e
GET /www.yildizsurucukursu.com/wp-content/uploads/close-envelope.png?resize=30%2C30&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 336
last-modified: Thu, 08 Dec 2022 06:32:44 GMT
expires: Sat, 07 Dec 2024 18:32:44 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/close-envelope.png>; rel="canonical"
x-content-type-options: nosniff
etag: "536ba373bb49e66b"
vary: Accept
x-nc: HIT arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/form-3.jpg?w=600&ssl=1
192.0.77.2200 OK 12 kB URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/form-3.jpg?w=600&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f1eb8b06923c71d0384750304135cb51
f6673a1f4aabb2610cebb3265246a55625b19c5d
a461d8a4bfd1d22c815536a516073572971206c60303be1e1df85592f05bd998
GET /www.yildizsurucukursu.com/wp-content/uploads/form-3.jpg?w=600&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 12014
last-modified: Fri, 16 Dec 2022 09:17:37 GMT
expires: Sun, 15 Dec 2024 21:17:37 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/form-3.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "fbf8f90c0265026b"
vary: Accept
x-nc: HIT arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 384a2b2f97397ee2741922068da5bdcd
256bcaf0f153a739623feb917ad1c8745b7a3651
541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixel.wp.com/g.gif?v=ext&blog=162106898&post=8&tz=3&srv=www.yildizsurucukursu.com&j=1%3A11.6&host=www.yildizsurucukursu.com&ref=&fcp=6420&rand=0.4849598447952267
192.0.76.3200 OK 50 B URL HTTP/2 pixel.wp.com/g.gif?v=ext&blog=162106898&post=8&tz=3&srv=www.yildizsurucukursu.com&j=1%3A11.6&host=www.yildizsurucukursu.com&ref=&fcp=6420&rand=0.4849598447952267
IP 192.0.76.3:0
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&blog=162106898&post=8&tz=3&srv=www.yildizsurucukursu.com&j=1%3A11.6&host=www.yildizsurucukursu.com&ref=&fcp=6420&rand=0.4849598447952267 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:13 GMT
expires: Sat, 16 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
age: 345104
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/yildizsurucukursu-20190222-04.jpg?w=800&ssl=1
192.0.77.2200 OK 48 kB URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/yildizsurucukursu-20190222-04.jpg?w=800&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cee0dd95258720dc89266fd6950b8daf
fe68ce339e6b1bac987ed5af4c1f21ea27a38d2a
f24c65d41acad2d1e02228b482dfcfc33320a0d09fc1663e2b8ef4d717d25494
GET /www.yildizsurucukursu.com/wp-content/uploads/yildizsurucukursu-20190222-04.jpg?w=800&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 48214
last-modified: Fri, 16 Dec 2022 09:17:37 GMT
expires: Sun, 15 Dec 2024 21:17:37 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/yildizsurucukursu-20190222-04.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "785aa987a7511363"
vary: Accept
x-nc: HIT arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2
216.58.207.227200 OK 33 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 33340, version 1.0\012- data
Hash 1462fe121afeab5c279708499e475089
14b1b57c47e44fd469892eb64d7d5d594203c0e0
d0b5f2cb38ee6588b4c127c9d32c5bdc2f3530cc294bd9867f11a17b1236a2ad
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 19:25:06 GMT
expires: Tue, 19 Dec 2023 19:25:06 GMT
cache-control: public, max-age=31536000
age: 64791
last-modified: Mon, 15 Aug 2022 18:15:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/instagram.png?resize=30%2C30&ssl=1
192.0.77.2200 OK 354 B URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/instagram.png?resize=30%2C30&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8eb057056cf43deeef5466f3cb36f4c9
48aa859bcb5e8e34df89563a80c446314c9e3125
47e2fa4a02d3bd3fa9bafbb2430c0fe1c0c10f6a43312662ec7a2a0c740acd48
GET /www.yildizsurucukursu.com/wp-content/uploads/instagram.png?resize=30%2C30&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 354
last-modified: Thu, 08 Dec 2022 06:32:44 GMT
expires: Sat, 07 Dec 2024 18:32:44 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/instagram.png>; rel="canonical"
x-content-type-options: nosniff
etag: "b84c3cdcbbf0701d"
vary: Accept
x-nc: HIT arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
216.58.207.227200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Hash 3fe71527811fbfedd2c07962e1bc49e7
f63e158a0480c5d711b5e268db0e75e57d87a8a5
24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.yildizsurucukursu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:13 GMT
expires: Sat, 16 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
age: 345104
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/facebook-logo.png?resize=30%2C30&ssl=1
192.0.77.2200 OK 214 B URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/facebook-logo.png?resize=30%2C30&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 280d85fdcc516d1cb6cf789b35989251
dc28e0889801b9712e3031533e95215a2d8b7bd0
5bfeab370631fefe2bf342999bbe344f8f319ce5548293eacc6ad254afdd7961
GET /www.yildizsurucukursu.com/wp-content/uploads/facebook-logo.png?resize=30%2C30&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 214
last-modified: Thu, 08 Dec 2022 06:32:44 GMT
expires: Sat, 07 Dec 2024 18:32:44 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/facebook-logo.png>; rel="canonical"
x-content-type-options: nosniff
etag: "70ad320810c4a6db"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/icon.png?resize=30%2C30&ssl=1
192.0.77.2200 OK 164 B URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/icon.png?resize=30%2C30&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 17b00576789a009332f31fcd6707ab79
174c56f096038e61f7974d970fe23b08182a6756
6e7f42daecbd1535fb82cef3c6e1cbd893d28dad5a94fdb619f5613254dba41f
GET /www.yildizsurucukursu.com/wp-content/uploads/icon.png?resize=30%2C30&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 164
last-modified: Thu, 08 Dec 2022 06:32:44 GMT
expires: Sat, 07 Dec 2024 18:32:44 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/icon.png>; rel="canonical"
x-content-type-options: nosniff
etag: "d8530e5f37129948"
vary: Accept
x-nc: HIT arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/a-sari.png?fit=150%2C150&ssl=1
192.0.77.2200 OK 2.1 kB URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/a-sari.png?fit=150%2C150&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 482a00bd3a874880a88f0d986823df8b
4f47e25b9dabbda5ebb5414547ab463d976517d1
5e669507241be96b1b4eebec621eeba3f16f544a3850726f27b1ee89f9887e32
GET /www.yildizsurucukursu.com/wp-content/uploads/a-sari.png?fit=150%2C150&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 2066
last-modified: Fri, 16 Dec 2022 09:17:37 GMT
expires: Sun, 15 Dec 2024 21:17:37 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/a-sari.png>; rel="canonical"
x-content-type-options: nosniff
etag: "f90fd2e182b2e80b"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/a2-sari.png?fit=150%2C150&ssl=1
192.0.77.2200 OK 2.2 kB URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/a2-sari.png?fit=150%2C150&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash de3ef6b442697ec4a837b788352bc174
62457c8eb656085545df2b44bb56619240a04650
2c1dba500c9c51c4e4d4921ced0d3113ba0b52053c514ec9ad1fbf01b200e9cd
GET /www.yildizsurucukursu.com/wp-content/uploads/a2-sari.png?fit=150%2C150&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 2180
last-modified: Fri, 16 Dec 2022 09:17:37 GMT
expires: Sun, 15 Dec 2024 21:17:37 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/a2-sari.png>; rel="canonical"
x-content-type-options: nosniff
etag: "6b3c21d1e96cb5a5"
vary: Accept
x-nc: HIT arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/form-1.jpg?w=600&ssl=1
192.0.77.2200 OK 35 kB URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/form-1.jpg?w=600&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f119a8099b19c38784df085417e58bee
643520cf951b8f6e560f5656b537a5b8099c140a
1d5ab6fe5b9535f086b66aa1481acee6d00be1758b6c546bad6a5cd4bbd8e13a
GET /www.yildizsurucukursu.com/wp-content/uploads/form-1.jpg?w=600&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 35134
last-modified: Fri, 16 Dec 2022 09:17:37 GMT
expires: Sun, 15 Dec 2024 21:17:37 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/form-1.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "8645b46cc5d559fd"
vary: Accept
x-nc: HIT arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/a1-sari.png?fit=150%2C150&ssl=1
192.0.77.2200 OK 2.1 kB URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/a1-sari.png?fit=150%2C150&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4e17694aa9e62f228a2e390eaa29934d
7a343ac87e684495c48ba991d4a26f683973f416
962601a945acbbd17bd6696297a4c9803ea7eb1ee0fef3ed1ac7fd6c0971d858
GET /www.yildizsurucukursu.com/wp-content/uploads/a1-sari.png?fit=150%2C150&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 2062
last-modified: Fri, 16 Dec 2022 09:17:37 GMT
expires: Sun, 15 Dec 2024 21:17:37 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/a1-sari.png>; rel="canonical"
x-content-type-options: nosniff
etag: "4be93fb4c9b910d7"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/phone-contact.png?resize=30%2C30&ssl=1
192.0.77.2200 OK 620 B URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/phone-contact.png?resize=30%2C30&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 389e397e658bbc6d83d1a74c19bc616e
fc85207d20061245dd4cc594caa0128155eaf12f
0b182d7f4bf5400a6399b93a92df912707693869ea744c14b1b90445a03bf9b5
GET /www.yildizsurucukursu.com/wp-content/uploads/phone-contact.png?resize=30%2C30&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 620
last-modified: Thu, 08 Dec 2022 06:32:44 GMT
expires: Sat, 07 Dec 2024 18:32:44 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/phone-contact.png>; rel="canonical"
x-content-type-options: nosniff
etag: "b7df2051cf22c006"
vary: Accept
x-nc: HIT arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 4f05977a009dd740d1f82894bb649d6f
a6e1a419deff5fc86ffa4fc7991435ec1578233a
6cc36a336c232d9d1823ea0bec9acaf4744f0f1b9648cdd21ce44d294e9cb576
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 33b3e9caf6728c5b916ec1ffee5ce0b3
06dccffaf379bc6709ca42d408ae530d8a14ef83
2ed45ebc478006d7657cd42f5779635c871a5919efa7a6d7ed3a3fa344089360
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 384a2b2f97397ee2741922068da5bdcd
256bcaf0f153a739623feb917ad1c8745b7a3651
541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/b-sari.png?fit=150%2C150&ssl=1
192.0.77.2200 OK 1.9 kB URL HTTP/2 i0.wp.com/www.yildizsurucukursu.com/wp-content/uploads/b-sari.png?fit=150%2C150&ssl=1
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 55aabd1ce1131b9e5eebbbda233ec94a
ea5194e20e82729bf96f8affb8cbfc9405eda14a
da2763d34603b19b5c04df078b5e6212a5db00226843121df3a1047f6d0f6b2a
GET /www.yildizsurucukursu.com/wp-content/uploads/b-sari.png?fit=150%2C150&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:57 GMT
content-type: image/webp
content-length: 1874
last-modified: Fri, 16 Dec 2022 08:58:48 GMT
expires: Sun, 15 Dec 2024 20:58:48 GMT
cache-control: public, max-age=63115200
link: <https://www.yildizsurucukursu.com/wp-content/uploads/b-sari.png>; rel="canonical"
x-content-type-options: nosniff
etag: "72947e45fb1cd5e3"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash c8787baa5a6686b8edeb9b43975d7955
62d439a9bdf7855b6276c11cf79d9fda5b4a5dd7
da2960774805f69f44b4ce8d0171f595e80cd745c594cb1810d6dc7ed1826089
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 13:24:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1zQkXFnsSwS1RBxZ4gWUlMRElaIFPDnFLDnEPDnCBLVVJTVQ!5e0!6i18!3m1!1sEnglish!5m1!1sEnglish
142.250.74.164200 OK 1.5 kB URL HTTP/2 www.google.com/maps/embed?origin=mfe&pb=!1m4!2m1!1zQkXFnsSwS1RBxZ4gWUlMRElaIFPDnFLDnEPDnCBLVVJTVQ!5e0!6i18!3m1!1sEnglish!5m1!1sEnglish
IP 142.250.74.164:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3073)
Hash bea5585b6f0b4d7baaccdc2b1a5d4479
032abc1890a530268d1f6fa6ae4c7a3ea2ddce12
e3a8a3c959500ae830a164586770183ecdc36727eebafe39ab6dbf2014c4ae31
GET /maps/embed?origin=mfe&pb=!1m4!2m1!1zQkXFnsSwS1RBxZ4gWUlMRElaIFPDnFLDnEPDnCBLVVJTVQ!5e0!6i18!3m1!1sEnglish!5m1!1sEnglish HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.yildizsurucukursu.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Tue, 20 Dec 2022 13:24:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-MNKHjVkD7YjKxaD5bcMPXQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 1474
x-xss-protection: 0
server-timing: gfet4t7; dur=329
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/uploads/yildiz-mini-cooper.png
185.15.196.168200 OK 346 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/yildiz-mini-cooper.png
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type PNG image data, 800 x 473, 8-bit/color RGBA, non-interlaced\012- data
Size 346 kB (346239 bytes)
Hash 74349a2ca0759acba33dffef17837e09
a1a67438faf2c37afbdb8e9e41bae9cbd6edb313
40b2c3d96c72a632c2da7ceec44c0684be8fcb0dc1b7753e7d4fd3948ad4b3d8
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/yildiz-mini-cooper.png HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Cookie: _gcl_au=1.1.1395626588.1671542698
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Fri, 23 Nov 2018 18:13:20 GMT
Accept-Ranges: bytes
Content-Length: 346239
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
www.yildizsurucukursu.com/wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-5.jpg
185.15.196.168200 OK 113 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-5.jpg
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x870, components 3\012- data
Size 113 kB (113041 bytes)
Hash 783da96c1a90061d214160962178b17d
aa24a35f28ffef310312213d256ca6dd7f2c90c5
62ddd05a1a8467d098a061aa3dfcdfc63effd6aa85e55aadc2f213552f8b4b94
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-5.jpg HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Cookie: _gcl_au=1.1.1395626588.1671542698
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Fri, 21 Sep 2018 11:05:53 GMT
Accept-Ranges: bytes
Content-Length: 113041
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
www.yildizsurucukursu.com/wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-7.jpg
185.15.196.168200 OK 171 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-7.jpg
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x870, components 3\012- data
Size 171 kB (171055 bytes)
Hash 3c40cbcfee001d1c1b6d5d5f9168a661
0835ea12ab216261d6b5d71c9bee17019b09c263
7cb38931f2a5a1b3ccd3c7d5eacbe7bd87783ac31f9f3ad5b1cadfe353724914
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-7.jpg HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Cookie: _gcl_au=1.1.1395626588.1671542698
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Fri, 21 Sep 2018 11:11:28 GMT
Accept-Ranges: bytes
Content-Length: 171055
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
www.yildizsurucukursu.com/wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-3.jpg
185.15.196.168200 OK 136 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-3.jpg
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x870, components 3\012- data
Size 136 kB (135830 bytes)
Hash fb2c845200005a944d3d2f4d43c8fefe
3848dac07545113dd0c0c1cfdb02c297d5379add
b78fbf072a84a2880e95d8337ffa27eac0228e0c5dffd1cb8fc40179f18a14f3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-3.jpg HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Cookie: _gcl_au=1.1.1395626588.1671542698
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Fri, 21 Sep 2018 10:28:10 GMT
Accept-Ranges: bytes
Content-Length: 135830
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
maps.gstatic.com/maps-api-v3/embed/js/51/3/init_embed.js
142.250.74.3200 OK 69 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/51/3/init_embed.js
IP 142.250.74.3:0
File type ASCII text, with very long lines (2669)
Hash 670da89542ecf04a8bbff2049748654f
2fcd2c31427edfd9b3180e233a009677b0d88973
d1bdcacb4973ce7c60a0f59144bf6fb699eea4fc016ca1780cdf61dbd9efb3bc
GET /maps-api-v3/embed/js/51/3/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 69327
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 20:12:31 GMT
expires: Thu, 14 Dec 2023 20:12:31 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 18:55:12 GMT
content-type: text/javascript
age: 493947
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-6.jpg
185.15.196.168200 OK 230 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-6.jpg
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x870, components 3\012- data
Size 230 kB (230469 bytes)
Hash 9151355d294322a59e1e09d5a57c0fb0
21824d9b288e4594cd4726bec60bea9331e09350
897dd8f61f268d6a957ddd030b48b557c0430b3e8abf18ead4f4dac5e1a076c0
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/ozel-besiktas-yildiz-surucu-kursu-6.jpg HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Cookie: _gcl_au=1.1.1395626588.1671542698
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Fri, 21 Sep 2018 11:08:58 GMT
Accept-Ranges: bytes
Content-Length: 230469
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
www.google-analytics.com/analytics.js
216.58.207.206200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 216.58.207.206:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 20 Dec 2022 12:41:08 GMT
expires: Tue, 20 Dec 2022 14:41:08 GMT
cache-control: public, max-age=7200
age: 2630
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/themes/yildizwp/images/497d0a6c10eb727ed8b300f1eae8c25b_yildizsurucukursufavicon.png
185.15.196.168200 OK 115 kB URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/images/497d0a6c10eb727ed8b300f1eae8c25b_yildizsurucukursufavicon.png
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
File type PNG image data, 923 x 924, 8-bit/color RGBA, non-interlaced\012- data
Size 115 kB (114848 bytes)
Hash fa4b58ab8d738bfc5d7abc452614fa69
9e18d1c623a75a53363e04bfaa04e94aab08069d
f3fc97d9a4cc01ac426a89522b14cc94658335907ea5216548eb60c6b1d54c20
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/images/497d0a6c10eb727ed8b300f1eae8c25b_yildizsurucukursufavicon.png HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Cookie: _gcl_au=1.1.1395626588.1671542698
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:58 GMT
Server: Apache
Last-Modified: Tue, 16 Oct 2018 11:28:29 GMT
Accept-Ranges: bytes
Content-Length: 114848
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
www.bydirector.com/web-imza/bydirector-white.png
45.84.191.35301 Moved Permanently 0 B URL HTTP/1.1 www.bydirector.com/web-imza/bydirector-white.png
IP 45.84.191.35:0
ASN #42846 GNET Internet Telekomunikasyon A.S.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web-imza/bydirector-white.png HTTP/1.1
Host: www.bydirector.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.3.33
x-ua-compatible: IE=edge
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: http://bydirector.com/web-imza/bydirector-white.png
x-litespeed-cache: miss
content-length: 0
date: Tue, 20 Dec 2022 13:24:56 GMT
server: LiteSpeed
www.yildizsurucukursu.com/?wordfence_lh=1&hid=62E7EDF0F111EDF4C18CC4D88DC8342F&r=0.006103035548839397
185.15.196.168200 OK 0 B URL HTTP/1.1 www.yildizsurucukursu.com/?wordfence_lh=1&hid=62E7EDF0F111EDF4C18CC4D88DC8342F&r=0.006103035548839397
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /?wordfence_lh=1&hid=62E7EDF0F111EDF4C18CC4D88DC8342F&r=0.006103035548839397 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
X-UA-Compatible: IE=edge
Link: <https://www.yildizsurucukursu.com/wp-json/>; rel="https://api.w.org/", <https://www.yildizsurucukursu.com/wp-json/wp/v2/pages/8>; rel="alternate"; type="application/json", <https://www.yildizsurucukursu.com/>; rel=shortlink
Connection: close
X-Robots-Tag: noindex
Content-Length: 0
Content-Type: text/javascript;charset=UTF-8
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 21:48:03 GMT
expires: Fri, 15 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 401816
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 16:40:43 GMT
expires: Fri, 15 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 420256
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js
192.0.77.37200 OK 43 kB URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/jquery.min.js
IP 192.0.77.37:0
File type ASCII text, with very long lines (65447)
Hash 87e4e27a9a4c2bd2911c0a6ade3f0359
7852f09f66515d77c806f47ca349bbb3e65a5216
9b45f60ac6f310578113e1bbd4c0629290019367cd3ad44f570e0139e6e854bf
GET /c/6.1.1/wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 19 Sep 2022 14:16:24 GMT
content-encoding: br
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
bydirector.com/web-imza/bydirector-white.png
45.84.191.35404 Not Found 7.9 kB URL HTTP/1.1 bydirector.com/web-imza/bydirector-white.png
IP 45.84.191.35:0
ASN #42846 GNET Internet Telekomunikasyon A.S.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash e184fae8ba4e1ac6696b89117c946773
d8948e0cf7c1e4f9946db3dda74770d2ef7bbb00
68f11313347aa491d6f39b9c3348640323ec829e6b60c865ddb239735316625f
GET /web-imza/bydirector-white.png HTTP/1.1
Host: bydirector.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.3.33
x-ua-compatible: IE=edge
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://bydirector.com/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: 06e_HTTP.404,06e_PGSRP,06e_404,06e_URL.5a73f299ffc056426b66f5b29b94f694,06e_
x-litespeed-cache: miss
transfer-encoding: chunked
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 20 Dec 2022 13:24:57 GMT
server: LiteSpeed
fonts.googleapis.com/css?family=Open+Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic&subset=latin
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic&subset=latin
IP 142.250.74.106:0
GET /css?family=Open+Sans:300,300italic,regular,italic,600,600italic,700,700italic,800,800italic&subset=latin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Dec 2022 13:24:56 GMT
date: Tue, 20 Dec 2022 13:24:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.1
185.15.196.168200 OK 0 B URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.1
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.1 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:56 GMT
Server: Apache
Last-Modified: Tue, 20 Dec 2022 06:40:43 GMT
Accept-Ranges: bytes
Content-Length: 137878
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.yildizsurucukursu.com/wp-content/themes/yildizwp/script.js?ver=1.0.512
185.15.196.168200 OK 0 B URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/themes/yildizwp/script.js?ver=1.0.512
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/yildizwp/script.js?ver=1.0.512 HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Sun, 30 Sep 2018 19:51:08 GMT
Accept-Ranges: bytes
Content-Length: 111017
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
content-encoding: br
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.yildizsurucukursu.com/wp-content/uploads/parallax-zemin-1.jpg
185.15.196.168200 OK 0 B URL HTTP/1.1 www.yildizsurucukursu.com/wp-content/uploads/parallax-zemin-1.jpg
IP 185.15.196.168:0
ASN #201520 Dedicated Telekomunikasyon Teknoloji Hiz. Tic. San. LTD. STI.
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/parallax-zemin-1.jpg HTTP/1.1
Host: www.yildizsurucukursu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/wp-content/uploads/elementor/css/post-8.css?ver=1653131750
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 13:24:57 GMT
Server: Apache
Last-Modified: Sun, 09 Sep 2018 09:55:56 GMT
Accept-Ranges: bytes
Content-Length: 177332
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
c0.wp.com/p/jetpack/11.6/css/jetpack.css
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/p/jetpack/11.6/css/jetpack.css
IP 192.0.77.37:0
GET /p/jetpack/11.6/css/jetpack.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 28 Nov 2022 20:32:01 GMT
content-encoding: br
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
c0.wp.com/c/6.1.1/wp-includes/js/jquery/ui/core.min.js
192.0.77.37200 OK 0 B URL HTTP/2 c0.wp.com/c/6.1.1/wp-includes/js/jquery/ui/core.min.js
IP 192.0.77.37:0
GET /c/6.1.1/wp-includes/js/jquery/ui/core.min.js HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 13:24:56 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 23 Sep 2022 19:55:30 GMT
content-encoding: br
expires: Wed, 20 Dec 2023 13:24:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 1
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CDancing+Script%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=latin-ext&ver=6.1.1
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CDancing+Script%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=latin-ext&ver=6.1.1
IP 142.250.74.106:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CDancing+Script%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=latin-ext&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.yildizsurucukursu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Dec 2022 13:24:56 GMT
date: Tue, 20 Dec 2022 13:24:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2