Edit tour

Windows Analysis Report
http://ekitaprojesi.com/

Overview

General Information

Sample URL:	http://ekitaprojesi.com/
Analysis ID:	1541642
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1052 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1016 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ekitaprojesi.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /e HTTP/1.1Host: analytics.shareaholic.comConnection: keep-aliveContent-Length: 157sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://www.ekitaprojesi.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.ekitaprojesi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.facebook.com/EKitapProjesi	HTTP Parser: <input type="password" .../> found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: <input type="password" .../> found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2FEKitapProjesi&lwv=120&lwc=1348131	HTTP Parser: <input type="password" .../> found

Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon
Source: https://www.ekitaprojesi.com/	HTTP Parser: No favicon

Source: https://www.facebook.com/EKitapProjesi	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/EKitapProjesi	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/EKitapProjesi	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2FEKitapProjesi&lwv=120&lwc=1348131	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2FEKitapProjesi&lwv=120&lwc=1348131	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/EKitapProjesi	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/EKitapProjesi	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/EKitapProjesi	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2FEKitapProjesi&lwv=120&lwc=1348131	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2FEKitapProjesi&lwv=120&lwc=1348131	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50444 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: ekitaprojesi.com
Source: global traffic	DNS traffic detected: DNS query: www.ekitaprojesi.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: platform.twitter.com
Source: global traffic	DNS traffic detected: DNS query: cdn.shareaholic.net
Source: global traffic	DNS traffic detected: DNS query: partner.shareaholic.com
Source: global traffic	DNS traffic detected: DNS query: recs.shareaholic.com
Source: global traffic	DNS traffic detected: DNS query: analytics.shareaholic.com
Source: global traffic	DNS traffic detected: DNS query: www.shareaholic.net
Source: global traffic	DNS traffic detected: DNS query: cdn.openshareweb.com
Source: global traffic	DNS traffic detected: DNS query: widget.boomads.com
Source: global traffic	DNS traffic detected: DNS query: cdn.shopify.com
Source: global traffic	DNS traffic detected: DNS query: sezaikayaoglu.files.wordpress.com
Source: global traffic	DNS traffic detected: DNS query: assets.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sezaikayaoglu.wordpress.com
Source: global traffic	DNS traffic detected: DNS query: v2.zopim.com
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: ekr.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: px.owneriq.net
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: aggle.net
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: a.usbrowserspeed.com
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: tapestry.tapad.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: beacon.krxd.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: scontent.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: video.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: scontent-sea1-1.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: pixel.shareaholic.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: youtu.be
Source: global traffic	DNS traffic detected: DNS query: muratukray.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: facebook.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: widget-mediator.zopim.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originContent-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Thu, 24 Oct 2024 23:02:02 GMTServer: cafeCache-Control: privateX-XSS-Protection: 0Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 24-Oct-2024 23:17:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=noneAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Accept-EncodingConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 23:02:09 GMTContent-Type: image/gifContent-Length: 49Connection: closeP3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAVCache-Control: no-cachePragma: no-cacheExpires: 0X-Server: 10.45.24.85Access-Control-Allow-Origin: *Server: Jetty(9.4.38.v20210224)
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 5AWad2KaMsaoR6YTh5DsglckrcYCrfdLhRQ5dG1TUw0h+GE6obkW4PNE4WzmGPbq+S6wNWLiibf4Qs+4v4FTiA==Date: Thu, 24 Oct 2024 23:02:20 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: HO2RM2Jdro4aF/6ftZYzrf4lGfL/jLZSpe22j+JO0UURfFA/hCFHmRTzjR5myK1Awv461Nr4biQebBUu4LNAkQ==Date: Thu, 24 Oct 2024 23:02:21 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Hsxz+Yqm2jTvOYKfBmltCspoQ5g+3qzHuBZuf76wigLVAFkgd6BeELwpzcu8216KgsgnbV6s1pj74wBj3Hs9dw==Date: Thu, 24 Oct 2024 23:02:22 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Ycc0abArmUD5VRp0X9RpUbwhzcRAPcWR5el/7YhcOukNOnyRVw16wRptGrHxP4EDQ6P9c4uJlPveTqVLuW7iQw==Date: Thu, 24 Oct 2024 23:02:23 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: dJWriqaKItqbecmdHahkEezO96N5hbH35UXxIlYvRvmY40MeIbUcha9zIVKUhgxOcnWi0bVPIhTSOhzpN5v5UA==Date: Thu, 24 Oct 2024 23:02:25 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: SR4iypCuCf2V4UcrJNoG7BXXe7HXcMKZhQJ49TnSQhikRbuxrbFZzpUIYsSHFKF9wG4ILsUNc79GEiU01dHWoA==Date: Thu, 24 Oct 2024 23:02:26 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: riyP9d5IJMLnc9TK/euh0OjbAgIQDP/FWuxZboGPQjaOGQYdVYaOZMya05CGVMnxO3+CAxS/UP5ubcommekmTw==Date: Thu, 24 Oct 2024 23:02:40 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: e0VYWQOWXKScUAynGlmI8m1y1qGSJJrtIeDbkUp4mXNoY5RsRLvljJQiNyw3C/CatSbVU866ftl2Dg8BXTxx6g==Date: Thu, 24 Oct 2024 23:02:41 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 23:02:42 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: AWSALB=FwZmcOhXVVNFy7KScuM+CQS4kzmlKdGdBKLqUSbXt+hzlYWhkFG0VK850Vw+klR+Rw2A1I9CazQQuDPmpmMCc+kZZwbiE4EQwjtsN9W8lwvNkXjGjkwsjfM4KAhm; Expires=Thu, 31 Oct 2024 23:02:42 GMT; Path=/Set-Cookie: AWSALBCORS=FwZmcOhXVVNFy7KScuM+CQS4kzmlKdGdBKLqUSbXt+hzlYWhkFG0VK850Vw+klR+Rw2A1I9CazQQuDPmpmMCc+kZZwbiE4EQwjtsN9W8lwvNkXjGjkwsjfM4KAhm; Expires=Thu, 31 Oct 2024 23:02:42 GMT; Path=/; SameSite=None; SecureServer: nginx
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 23:02:42 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: AWSALB=lgEEh1Xgrh+jMCwDSYH3P+S13Nm+06+2b6CJd4oQSp7qqOhy7wvbEU+79wIZhwBqj+EGCFKILk3gsm1bUxhn5U8YP7lEN1s3koP7+wQR5BNKke00GzKLxW5PVJrh; Expires=Thu, 31 Oct 2024 23:02:42 GMT; Path=/Set-Cookie: AWSALBCORS=lgEEh1Xgrh+jMCwDSYH3P+S13Nm+06+2b6CJd4oQSp7qqOhy7wvbEU+79wIZhwBqj+EGCFKILk3gsm1bUxhn5U8YP7lEN1s3koP7+wQR5BNKke00GzKLxW5PVJrh; Expires=Thu, 31 Oct 2024 23:02:42 GMT; Path=/; SameSite=None; SecureServer: nginx
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundpragma: no-cacheexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://www.ekitaprojesi.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkeddate: Thu, 24 Oct 2024 23:02:43 GMTserver: LiteSpeedalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 23:02:44 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: AWSALB=Ull7S4JGgwoxzHGqwDt1emS9QnDoSyYtLQ7/EhkhWNO5JzasfPI6nvqF7CxQ9/etk9nSmthVXeK2FZ8jww0r+xWC6o4RCvyPrd1glRHBYQK1PBwCXLPF6II3lWAP; Expires=Thu, 31 Oct 2024 23:02:44 GMT; Path=/Set-Cookie: AWSALBCORS=Ull7S4JGgwoxzHGqwDt1emS9QnDoSyYtLQ7/EhkhWNO5JzasfPI6nvqF7CxQ9/etk9nSmthVXeK2FZ8jww0r+xWC6o4RCvyPrd1glRHBYQK1PBwCXLPF6II3lWAP; Expires=Thu, 31 Oct 2024 23:02:44 GMT; Path=/; SameSite=None; SecureServer: nginx

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ekitaprojesi.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1052 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1016 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1052 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1016 --field-trial-handle=2012,i,10555776493522130143,11843565398324009361,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: chromecache_810.2.dr	String found in binary or memory: <div class="fb-page" data-href="https://www.facebook.com/EkitapProjesi" data-tabs="timeline,messages" data-small-header="false" data-adapt-container-width="true" data-hide-cta="false" data-hide-cover="false" data-show-facepile="true" data-lazy="false" data-width="300" data-height="500"><div class="fb-xfbml-parse-ignore"><blockquote cite="https://www.facebook.com/EkitapProjesi"><a href="https://www.superwebtricks.com/">SuperWebTricks</a> Loading...</blockquote></div></div> equals www.facebook.com (Facebook)
Source: chromecache_396.2.dr, chromecache_808.2.dr, chromecache_622.2.dr, chromecache_845.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_801.2.dr, chromecache_927.2.dr, chromecache_531.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_396.2.dr, chromecache_808.2.dr, chromecache_622.2.dr, chromecache_845.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_961.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_452.2.dr, chromecache_801.2.dr, chromecache_615.2.dr, chromecache_927.2.dr, chromecache_531.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_767.2.dr, chromecache_636.2.dr, chromecache_833.2.dr, chromecache_652.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_396.2.dr, chromecache_806.2.dr, chromecache_808.2.dr, chromecache_801.2.dr, chromecache_531.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_396.2.dr, chromecache_660.2.dr, chromecache_895.2.dr, chromecache_808.2.dr, chromecache_429.2.dr, chromecache_801.2.dr, chromecache_841.2.dr, chromecache_531.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_801.2.dr, chromecache_927.2.dr, chromecache_531.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_649.2.dr, chromecache_452.2.dr, chromecache_801.2.dr, chromecache_581.2.dr, chromecache_615.2.dr, chromecache_531.2.dr, chromecache_404.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_913.2.dr	String found in binary or memory: </span><a href="/help/?ref=404" data-gt="{"target":"help","marketing_page_click":"1","conversion":"1"}">Visit our Help Center</a></div></div></div><div class="_cqu"><div id="pageFooter" data-referrer="page_footer" data-testid="page_footer"><ul class="uiList localeSelectorList _2pid _509- _4ki _6-h _6-j _6-i" data-nocookies="1"><li>English (US)</li><li><a class="_sv4" dir="ltr" href="https://www.facebook.com/ajax/bulk-route-definitions/" title="Spanish" id="u_0_6_G2">Espa equals www.facebook.com (Facebook)
Source: chromecache_600.2.dr	String found in binary or memory: </span><a href="/help/?ref=404" data-gt="{"target":"help","marketing_page_click":"1","conversion":"1"}">Visit our Help Center</a></div></div></div><div class="_cqu"><div id="pageFooter" data-referrer="page_footer" data-testid="page_footer"><ul class="uiList localeSelectorList _2pid _509- _4ki _6-h _6-j _6-i" data-nocookies="1"><li>English (US)</li><li><a class="_sv4" dir="ltr" href="https://www.facebook.com/platform/plugin/page/logging/" title="Spanish" id="u_0_6_Fk">Espa equals www.facebook.com (Facebook)
Source: chromecache_600.2.dr, chromecache_913.2.dr	String found in binary or memory: </span><a href="https://www.facebook.com/" data-gt="{"target":"home","marketing_page_click":"1","conversion":"1"}">Go to Feed</a><span role="presentation" aria-hidden="true"> equals www.facebook.com (Facebook)
Source: chromecache_600.2.dr	String found in binary or memory: <i class="_3jii img sp_L1i_YfDZM4k sx_6dcdc1" id="u_0_1_0O"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_h7"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1"><input type="hidden" name="jazoest" value="2938" autocomplete="off" /><input type="hidden" name="lsd" value="AVoica3y-UI" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgot account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log In</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_Um" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_4N" /><input type="hidden" name="lgnrnd" value="160241_AhMR" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_US" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI5ODEwOTYxLCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_US">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_L1i_YfDZM4k sx_416fc8"></i><div class="mbl pvl _4-dr fsm fwn fcg
Source: chromecache_913.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_Tj"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_b0"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1"><input type="hidden" name="jazoest" value="2912" autocomplete="off" /><input type="hidden" name="lsd" value="AVpV1xOqZ88" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgot account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log In</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_m3" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_xu" /><input type="hidden" name="lgnrnd" value="160226_5v5m" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_US" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI5ODEwOTQ2LCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_US">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4-dr fsm fwn fcg
Source: chromecache_913.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fajax%2Fbulk-route-definitions%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_YbiIuPczOY_ sx_089752"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Ray-Ban Meta" target="_blank">Ray-Ban Meta</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT0eImRVahkfhgEJCBH5sdI_TjFQbYJ4Ew3yDiu1sUmGqbjESlz6SkzhNkTtZfV4eXx0s84n4Xpd5i0oxDifBzH-o_0RKtSAcBN2W7RlU7-MZTMJrUlpFfbSshADjWGjRQKtA06Kz_82dTkKtPYE4A" title="Check out Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=4020
Source: chromecache_600.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fplatform%2Fplugin%2Fpage%2Flogging%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_L1i_YfDZM4k sx_c5acda"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Ray-Ban Meta" target="_blank">Ray-Ban Meta</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT3mpQ-AvbSWevyqf8_c7y0cMvcXsEZRyt5HPz0fxspATmC4VDlNWpa7TXWpYumiueZhMPncDLdF_uo-WHLFHCA4ywCrTK12wq8j7ngKPDPx5tNxNo_yt6ug8mX7ssCFk2Gxz2z3jUOsjeoxdm22RA" title="Check out Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id
Source: chromecache_600.2.dr	String found in binary or memory: <script nonce="6A6NPYrW">requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletArrive({displayResources:["4ddI+Ka"],id:"last_response",phase:1,last_in_phase:true,the_end:true,jsmods:{define:[["cr:6016",["NavigationMetricsWWW"],{__rc:["NavigationMetricsWWW",null]},-1],["cr:7383",["BanzaiWWW"],{__rc:["BanzaiWWW",null]},-1],["cr:5662",["Event"],{__rc:["Event",null]},-1],["cr:4425",[],{__rc:[null,null]},-1],["cr:3376",[],{__rc:[null,null]},-1],["cr:1083116",["XAsyncRequest"],{__rc:["XAsyncRequest",null]},-1],["cr:1083117",[],{__rc:[null,null]},-1],["TimeSliceInteractionSV",[],{on_demand_reference_counting:true,on_demand_profiling_counters:true,default_rate:1000,lite_default_rate:100,interaction_to_lite_coinflip:{ADS_INTERFACES_INTERACTION:0,ads_perf_scenario:0,ads_wait_time:0,Event:1},interaction_to_coinflip:{ADS_INTERFACES_INTERACTION:1,ads_perf_scenario:1,ads_wait_time:1,Event:100},enable_heartbeat:false,maxBlockMergeDuration:0,maxBlockMergeDistance:0,enable_banzai_stream:true,user_timing_coinflip:50,banzai_stream_coinflip:0,compression_enabled:true,ref_counting_fix:false,ref_counting_cont_fix:false,also_record_new_timeslice_format:false,force_async_request_tracing_on:false},2609],["BDSignalCollectionData",[],{sc:"{\"t\":1659080345,\"c\":[[30000,838801],[30001,838801],[30002,838801],[30003,838801],[30004,838801],[30005,838801],[30006,573585],[30007,838801],[30008,838801],[30012,838801],[30013,838801],[30015,806033],[30018,806033],[30021,540823],[30022,540817],[30040,806033],[30093,806033],[30094,806033],[30095,806033],[30101,541591],[30102,541591],[30103,541591],[30104,541591],[30106,806039],[30107,806039],[38000,541427],[38001,806643]]}",fds:60,fda:60,i:60,sbs:1,dbs:100,bbs:100,hbi:60,rt:262144,hbcbc:2,hbvbc:0,hbbi:30,sid:-1,hbv:"3362992936344836839"},5239],["cr:1642797",["BanzaiBase"],{__rc:["BanzaiBase",null]},-1],["cr:1042",["XAsyncRequestWWW"],{__rc:["XAsyncRequestWWW",null]},-1],["cr:1172",["WebSession"],{__rc:["WebSession",null]},-1],["cr:2037",["BanzaiAdapter"],{__rc:["BanzaiAdapter",null]},-1],["cr:3724",["SetIdleTimeoutAcrossTransitions"],{__rc:["SetIdleTimeoutAcrossTransitions",null]},-1],["cr:9985",["performanceAbsoluteNow"],{__rc:["performanceAbsoluteNow",null]},-1],["cr:9986",["CurrentUser"],{__rc:["CurrentUser",null]},-1],["cr:9987",["NavigationMetrics"],{__rc:["NavigationMetrics",null]},-1],["cr:9988",["Visibility"],{__rc:["Visibility",null]},-1],["cr:5866",["BanzaiAdapterWWW"],{__rc:["BanzaiAdapterWWW",null]},-1],["cr:7384",["cancelIdleCallbackWWW"],{__rc:["cancelIdleCallbackWWW",null]},-1],["cr:692209",["cancelIdleCallbackBlue"],{__rc:["cancelIdleCallbackBlue",null]},-1],["BanzaiConfig",[],{MAX_SIZE:10000,MAX_WAIT:150000,MIN_WAIT:null,RESTORE_WAIT:150000,blacklist:["time_spent"],disabled:false,gks:{boosted_pagelikes:true,platform_oauth_client_events:true,sticker_search_ranking:true},known_routes:["artillery_javascript_actions","artillery_javascript_trace","artillery_logger_data","logger","falco","gk2_exposure","js_error_lo
Source: chromecache_810.2.dr	String found in binary or memory: <ul id="" class="cnss-social-icon " style="text-align:right;"><li class="cn-fa-facebook cn-fa-icon " style="display:inline-block;"><a class="cnss-facebook" target="_blank" href="https://www.facebook.com/EKitapProjesi" title="Facebook" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Facebook" style="font-size:26px;" class="fa fa-facebook"></i></a></li><li class="cn-fa-twitter cn-fa-icon " style="display:inline-block;"><a class="cnss-twitter" target="_blank" href="https://x.com/ekitaprojesi" title="Twitter" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Twitter" style="font-size:26px;" class="fa fa-twitter"></i></a></li><li class="cn-fa-linkedin cn-fa-icon " style="display:inline-block;"><a class="cnss-linkedin" target="_blank" href="https://www.linkedin.com/in/murat-ukray-a9896322/" title="LinkedIn" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="LinkedIn" style="font-size:26px;" class="fa fa-linkedin"></i></a></li><li class="cn-fa-instagram cn-fa-icon " style="display:inline-block;"><a class="cnss-instagram" target="_blank" href="https://www.instagram.com/muratukray/" title="Instagram" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Instagram" style="font-size:26px;" class="fab fa-instagram"></i></a></li><li class="cn-fa-youtube cn-fa-icon " style="display:inline-block;"><a class="cnss-youtube" target="_blank" href="https://youtube.com/@murat17081976" title="Youtube" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Youtube" style="font-size:26px;" class="fab fa-youtube"></i></a></li><li class="cn-fa-pinterest cn-fa-icon " style="display:inline-block;"><a class="cnss-pinterest" target="_blank" href="http://pinterest.com/muratuhrayoglu/" title="Pinterest" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Pinterest" style="font-size:26px;" class="fab fa-pinterest"></i></a></li></ul><nav> equals www.facebook.com (Facebook)
Source: chromecache_810.2.dr	String found in binary or memory: <ul id="" class="cnss-social-icon " style="text-align:right;"><li class="cn-fa-facebook cn-fa-icon " style="display:inline-block;"><a class="cnss-facebook" target="_blank" href="https://www.facebook.com/EKitapProjesi" title="Facebook" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Facebook" style="font-size:26px;" class="fa fa-facebook"></i></a></li><li class="cn-fa-twitter cn-fa-icon " style="display:inline-block;"><a class="cnss-twitter" target="_blank" href="https://x.com/ekitaprojesi" title="Twitter" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Twitter" style="font-size:26px;" class="fa fa-twitter"></i></a></li><li class="cn-fa-linkedin cn-fa-icon " style="display:inline-block;"><a class="cnss-linkedin" target="_blank" href="https://www.linkedin.com/in/murat-ukray-a9896322/" title="LinkedIn" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="LinkedIn" style="font-size:26px;" class="fa fa-linkedin"></i></a></li><li class="cn-fa-instagram cn-fa-icon " style="display:inline-block;"><a class="cnss-instagram" target="_blank" href="https://www.instagram.com/muratukray/" title="Instagram" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Instagram" style="font-size:26px;" class="fab fa-instagram"></i></a></li><li class="cn-fa-youtube cn-fa-icon " style="display:inline-block;"><a class="cnss-youtube" target="_blank" href="https://youtube.com/@murat17081976" title="Youtube" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Youtube" style="font-size:26px;" class="fab fa-youtube"></i></a></li><li class="cn-fa-pinterest cn-fa-icon " style="display:inline-block;"><a class="cnss-pinterest" target="_blank" href="http://pinterest.com/muratuhrayoglu/" title="Pinterest" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Pinterest" style="font-size:26px;" class="fab fa-pinterest"></i></a></li></ul><nav> equals www.linkedin.com (Linkedin)
Source: chromecache_810.2.dr	String found in binary or memory: <ul id="" class="cnss-social-icon " style="text-align:right;"><li class="cn-fa-facebook cn-fa-icon " style="display:inline-block;"><a class="cnss-facebook" target="_blank" href="https://www.facebook.com/EKitapProjesi" title="Facebook" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Facebook" style="font-size:26px;" class="fa fa-facebook"></i></a></li><li class="cn-fa-twitter cn-fa-icon " style="display:inline-block;"><a class="cnss-twitter" target="_blank" href="https://x.com/ekitaprojesi" title="Twitter" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Twitter" style="font-size:26px;" class="fa fa-twitter"></i></a></li><li class="cn-fa-linkedin cn-fa-icon " style="display:inline-block;"><a class="cnss-linkedin" target="_blank" href="https://www.linkedin.com/in/murat-ukray-a9896322/" title="LinkedIn" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="LinkedIn" style="font-size:26px;" class="fa fa-linkedin"></i></a></li><li class="cn-fa-instagram cn-fa-icon " style="display:inline-block;"><a class="cnss-instagram" target="_blank" href="https://www.instagram.com/muratukray/" title="Instagram" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Instagram" style="font-size:26px;" class="fab fa-instagram"></i></a></li><li class="cn-fa-youtube cn-fa-icon " style="display:inline-block;"><a class="cnss-youtube" target="_blank" href="https://youtube.com/@murat17081976" title="Youtube" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Youtube" style="font-size:26px;" class="fab fa-youtube"></i></a></li><li class="cn-fa-pinterest cn-fa-icon " style="display:inline-block;"><a class="cnss-pinterest" target="_blank" href="http://pinterest.com/muratuhrayoglu/" title="Pinterest" style="width:40px;height:40px;padding:7px 0;margin:3px;color: #ffffff;border-radius: 50%;"><i title="Pinterest" style="font-size:26px;" class="fab fa-pinterest"></i></a></li></ul><nav> equals www.youtube.com (Youtube)
Source: chromecache_757.2.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var c=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]),d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_531.2.dr	String found in binary or memory: __d("CometLegalFooter.react",["fbt","ix","BaseMiddot.react","CometErrorBoundary.react","CometLink.react","CometPressable.react","FBCookieSettingsLoggedOutConfig","FDSLazyPopoverTrigger.react","FDSText.react","JSResourceForInteraction","ServerTime","TetraIcon.react","XHealthPolicyCometControllerRouteBuilder","XPrivacyPolicyCometControllerRouteBuilder","fbicon","gkx","react","useCurrentRoute"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k=j\|\|d("react"),l=c("JSResourceForInteraction")("CometLegalFooterMoreMenu.react").__setRef("CometLegalFooter.react");function m(){try{var a;return(a=new Date(d("ServerTime").getMillis()))==null?void 0:a.getFullYear()}catch(a){return null}}function a(a){var b=a.isHelpCenter;b=b===void 0?!1:b;var e=a.isPage;e=e===void 0?!1:e;var f=a.onClick;a=d("FBCookieSettingsLoggedOutConfig").should_show_cookie_settings;var g=c("useCurrentRoute")(),j=m(),n=c("XPrivacyPolicyCometControllerRouteBuilder").buildUri({entry_point:"comet_dropdown"}),o=c("XHealthPolicyCometControllerRouteBuilder").buildUri({});e=[{href:"https://www.facebook.com/legal/terms/information_about_page_insights_data",label:h._("Information about Page Insights Data"),render:e&&c("gkx")("22806")},{href:n.toString(),label:h._("Privacy"),testid:"CometDropdownPrivacy"},{href:o.toString(),label:h._("Consumer Health Privacy"),render:c("gkx")("2828"),testid:"CometDropdownHealthPrivacy"},{href:"/terms?ref=pf",label:"Impressum/Terms/NetzDG/UrhDaG",render:c("gkx")("22807")&&!c("gkx")("22808")},{href:"/terms?ref=pf",label:h._("Imprint\/Terms"),render:c("gkx")("22808")},{href:"/legal/germany/",label:"UrhDaG/MStV",render:c("gkx")("22808")},{href:"/policies?ref=pf",label:h._("Terms"),render:!c("gkx")("22807")&&!c("gkx")("22808"),testid:"CometDropdownTerms"},{href:"/business/",label:h._("Advertising")},{href:"/help/568137493302217",label:k.jsxs(k.Fragment,{children:[h._("Ad Choices")," ",k.jsx(c("CometErrorBoundary.react"),{children:k.jsx("span",{className:"x1n2onr6 x1qiirwl",children:k.jsx(c("TetraIcon.react"),{color:"secondary",icon:d("fbicon")._(i("871692"),12)})})})]})},{href:"/policies/cookies/",label:h._("Cookies"),testid:"CometDropdownCookies"},{href:"/privacy/cookie_settings/",label:h._("Cookie Settings"),render:a},{href:"https://www.facebook.com/help/cancelcontracts?source=facebook.com",label:h._("Cancel contracts here"),open_in_new_tab:!0,render:c("gkx")("4387")}].filter(function(a){return a.render==null\|\|a.render===!0});var p=[];if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoCrawlingPool)&&(g==null?void 0:(o=g.rootView.props)==null?void 0:o.seoCrawlingPool.url)){Array.from(Array((g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.multiple_links)\|\|0)).forEach(function(a,b){p.push(k.jsxs("li",{className:"xt0psk2",children:[k.jsx(c("CometLink.react"),{color_DEPRECATED:"secondary",href:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.url,onClick:f,weight_DEPRECATED:"normal",children:g==null?void 0:(a=g.rootView.props)==null
Source: chromecache_652.2.dr	String found in binary or memory: __d("FacebookCookieConsentCustomization",["fbt","ix","JSResourceForInteraction","XCookiesPolicyControllerRouteBuilder","isBaseline4EnabledForLoggedOut","isCNILEnabledForLoggedOut","lazyLoadComponent"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j=c("lazyLoadComponent")(c("JSResourceForInteraction")("FacebookCometCookieConsentDialogDataSettings.react").__setRef("FacebookCookieConsentCustomization"));a=function(){var a,b,d,e=null;c("isBaseline4EnabledForLoggedOut")()\|\|c("isCNILEnabledForLoggedOut")()?(b=i("1954651"),d=i("1954649"),e=h._("More options")):(b=i("856481"),d=i("856481"),e=h._("Manage Data Settings"));a=(a=(a=c("XCookiesPolicyControllerRouteBuilder").buildUri({}).getQualifiedUri())==null?void 0:(a=a.setDomain("www.facebook.com"))==null?void 0:a.toString())!=null?a:"";return{essentialCookiesOnly:!1,faviconDark:d,faviconLight:b,policyUrl:a,productName:"FACEBOOK",secondaryAction:{label:e,viewReference:j}}};b=a;g["default"]=b}),226); equals www.facebook.com (Facebook)
Source: chromecache_850.2.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null\|\|h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+\|\w+)\.(od\|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null\|\|h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_735.2.dr, chromecache_909.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_887.2.dr, chromecache_461.2.dr	String found in binary or memory: function onYouTubeIframeAPIReady(){slideshow_jquery_image_gallery_script.youTubeAPIReady=!0}slideshow_jquery_image_gallery_backend_script_scriptsloadedFlag=!1,slideshow_jquery_image_gallery_script=function(){var e=jQuery,i={};return i.slideshowInstances={},i.initialized=!1,i.youTubeAPIReady=!1,i.sessionIDCounter=0,i.init=function(){slideshow_jquery_image_gallery_backend_script_scriptsloadedFlag!==!0\|\|i.initialized\|\|(i.initialized=!0,e(document).trigger("slideshow_jquery_image_gallery_script_ready"),i.repairStylesheetURLs(),i.activateSlideshows(),i.enableLazyLoading(),e(document).trigger("slideshow_jquery_image_gallery_slideshows_ready"))},i.getSlideshowInstance=function(t){if(isNaN(parseInt(t,10))){if(t instanceof e&&t.length>0)for(var s in i.slideshowInstances)if(i.slideshowInstances.hasOwnProperty(s)){var n=i.slideshowInstances[s];if(n instanceof i.Slideshow&&n.$container.get(0)===t.get(0))return n}}else if(i.slideshowInstances[t]instanceof i.Slideshow)return i.slideshowInstances[t];return new i.Slideshow},i.activateSlideshows=function(){e.each(e(".slideshow_container"),function(t,s){i.activateSlideshow(e(s))})},i.activateSlideshow=function(e){e.hasClass("slideshow_container")&&"1"!=e.attr("data-slideshow-active")&&(e.attr("data-slideshow-active","1"),i.slideshowInstances[i.sessionIDCounter]=new i.Slideshow(e),i.sessionIDCounter++)},i.enableLazyLoading=function(){var t;"function"==typeof MutationObserver?(t=new MutationObserver(function(t){t.forEach(function(t){var s;if(t.addedNodes)for(s=0;s<t.addedNodes.length;s++)e.each(e(t.addedNodes[s]).find(".slideshow_container").addBack(".slideshow_container"),function(t,s){i.activateSlideshow(e(s))})})}),t.observe(document.body,{childList:!0,subtree:!0,attributes:!1,characterData:!1})):setInterval(function(){e.each(e(".slideshow_container:not([data-slideshow-active])"),function(t,s){i.activateSlideshow(e(s))})},2e3)},i.loadYouTubeAPI=function(){if(!i.loadYouTubeAPICalled){i.loadYouTubeAPICalled=!0;var e=document.createElement("script"),t=document.getElementsByTagName("script")[0];e.src="//www.youtube.com/iframe_api",t.parentNode.insertBefore(e,t)}},i.repairStylesheetURLs=function(){var i=e('[id*="slideshow-jquery-image-gallery-ajax-stylesheet_"]');e.each(i,function(i,t){var s,n,a,o=e(t),r=e(t).attr("href");void 0!==r&&""!==r&&(s=o.attr("id").split("_"),n=s.splice(1,s.length-1).join("_").slice(0,-4),a=r.split("?"),(void 0===a[1]\|\|""===a[1]\|\|a[1].toLowerCase().indexOf("style=")<0)&&(a[1]="action=slideshow_jquery_image_gallery_load_stylesheet&style="+n+"&ver="+Math.round((new Date).getTime()/1e3),r=a.join("?"),o.attr("href",r)))})},i.log=function(e){"object"==typeof console&&console.log("slideshow-jquery-image-gallery",e)},e(document).ready(function(){i.init()}),e(window).load(function(){i.init()}),e.fn.getSlideshowInstance=function(){return i.getSlideshowInstance(this)},i}(); equals www.youtube.com (Youtube)
Source: chromecache_735.2.dr, chromecache_909.2.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_771.2.dr, chromecache_823.2.dr, chromecache_470.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_491.2.dr	String found in binary or memory: return b}nD.F="internal.enableAutoEventOnTimer";var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_676.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/fb725ac8\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_649.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1017648540","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Source: chromecache_810.2.dr	String found in binary or memory: http://bumerang.hurriyet.com.tr
Source: chromecache_416.2.dr, chromecache_976.2.dr	String found in binary or memory: http://cherne.net/brian/resources/jquery.hoverIntent.html
Source: chromecache_755.2.dr, chromecache_646.2.dr, chromecache_657.2.dr, chromecache_995.2.dr, chromecache_564.2.dr, chromecache_549.2.dr	String found in binary or memory: http://ckeditor.com/license
Source: chromecache_878.2.dr, chromecache_713.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_956.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_435.2.dr, chromecache_499.2.dr	String found in binary or memory: http://google.com
Source: chromecache_435.2.dr, chromecache_499.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_439.2.dr, chromecache_802.2.dr, chromecache_401.2.dr, chromecache_680.2.dr	String found in binary or memory: http://j.hn/)
Source: chromecache_575.2.dr, chromecache_819.2.dr	String found in binary or memory: http://localhost:8080/sourcemaps/tag-lw.js.map
Source: chromecache_435.2.dr, chromecache_499.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_885.2.dr	String found in binary or memory: http://meyerweb.com/eric/tools/css/reset/index.html
Source: chromecache_956.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_435.2.dr, chromecache_499.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_900.2.dr, chromecache_455.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_810.2.dr	String found in binary or memory: http://wordpress.org
Source: chromecache_885.2.dr	String found in binary or memory: http://wplook.com/
Source: chromecache_885.2.dr	String found in binary or memory: http://wplook.com/blogolifepro
Source: chromecache_810.2.dr	String found in binary or memory: http://wplook.com/blogolifewpo
Source: chromecache_810.2.dr	String found in binary or memory: http://www.cheapestboooks.com
Source: chromecache_534.2.dr, chromecache_663.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_439.2.dr, chromecache_802.2.dr, chromecache_401.2.dr, chromecache_680.2.dr	String found in binary or memory: http://www.mediaelementjs.com/
Source: chromecache_534.2.dr, chromecache_663.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_810.2.dr	String found in binary or memory: http://yazarkafe.hurriyet.com.tr
Source: chromecache_502.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212281528&owneriqid=Q7830973281745519455J
Source: chromecache_393.2.dr, chromecache_687.2.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_393.2.dr, chromecache_687.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_393.2.dr, chromecache_463.2.dr, chromecache_878.2.dr, chromecache_771.2.dr, chromecache_713.2.dr, chromecache_823.2.dr, chromecache_470.2.dr, chromecache_687.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_393.2.dr, chromecache_771.2.dr, chromecache_823.2.dr, chromecache_470.2.dr, chromecache_687.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_934.2.dr, chromecache_463.2.dr, chromecache_878.2.dr, chromecache_771.2.dr, chromecache_713.2.dr, chromecache_823.2.dr, chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_949.2.dr, chromecache_761.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_524.2.dr, chromecache_491.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_683.2.dr, chromecache_776.2.dr	String found in binary or memory: https://api.jqueryui.com/position/
Source: chromecache_810.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_823.2.dr, chromecache_470.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_771.2.dr	String found in binary or memory: https://apis.google.com/js/plusone.js
Source: chromecache_810.2.dr	String found in binary or memory: https://apis.google.com/js/plusone.js?ver=6.6.2
Source: chromecache_823.2.dr, chromecache_470.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js
Source: chromecache_502.2.dr	String found in binary or memory: https://beacon.krxd.net/usermatch.gif?partner=owneriq&partner_uid=Q7830973281745519455J
Source: chromecache_524.2.dr, chromecache_491.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_435.2.dr, chromecache_499.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js

Source	Detection	Scanner	Label
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	0%	URL Reputation	safe
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
https://ep2.adtrafficquality.google/sodar/$	0%	URL Reputation	safe
https://jqueryui.com	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://cse.google.com/cse.js	0%	URL Reputation	safe

Name	Source	Malicious	Antivirus Detection	Reputation
http://wplook.com/blogolifepro	chromecache_885.2.dr	false		unknown
https://www.ekitaprojesi.com/wp-content/uploads/Borsaya-Teknik-Bak	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/genre/it	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/yayinci-hakkinda	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/genre/parenting-relationships-and-family	chromecache_810.2.dr	false		unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_649.2.dr	false		unknown
https://www.ekitaprojesi.com/genre/kisisel-gelisim	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/books/paradoksal-ritueller	chromecache_810.2.dr	false		unknown
https://www.bilimkurgukulubu.com/genel/inceleme/postmodernizm-ve-bilimkurgu-anlamin-otesine-gecen-bi	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/genre/childrens-books	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/genre/graphic-novelscomics	chromecache_810.2.dr	false		unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_919.2.dr	false	URL Reputation: safe	unknown
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_675.2.dr, chromecache_509.2.dr	false	URL Reputation: safe	unknown
https://www.ekitaprojesi.com/genre/marketing-law-marketingpazarlama	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/genre/hukuk	chromecache_810.2.dr	false		unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_771.2.dr, chromecache_823.2.dr, chromecache_470.2.dr	false		unknown
https://connect.facebook.net/en_US/all.js?ver=6.6.2#xfbml=1	chromecache_810.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_435.2.dr, chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://www.ekitaprojesi.com/genre/siir-kitaplari	chromecache_810.2.dr	false		unknown
https://fburl.com/wiki/xrzohrqb	chromecache_972.2.dr	false	URL Reputation: safe	unknown
https://www.ekitaprojesi.com/wp-content/plugins/wp-visitors-widget/modules/images/logo-dark-copy-2.p	chromecache_810.2.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_435.2.dr, chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://gtranslate.com	chromecache_633.2.dr, chromecache_589.2.dr	false		unknown
https://jqueryui.com	chromecache_683.2.dr, chromecache_776.2.dr	false	URL Reputation: safe	unknown
https://www.ekitaprojesi.com/genre/textbook-universite-ders-kitaplari-ucretsiz	chromecache_810.2.dr	false		unknown
http://wordpress.org	chromecache_810.2.dr	false		unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_735.2.dr, chromecache_909.2.dr	false	URL Reputation: safe	unknown
https://github.com/google/safevalues/issues	chromecache_771.2.dr	false		unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_771.2.dr, chromecache_823.2.dr, chromecache_470.2.dr	false		unknown
https://www.ekitaprojesi.com/genre/self-improvement-books	chromecache_810.2.dr	false		unknown
https://tapestry.tapad.com/tapestry/1?ta_partner_id=916&ta_partner_did=Q7830973281745519455J&ta_form	chromecache_502.2.dr, chromecache_886.2.dr	false		unknown
https://www.ekitaprojesi.com/genre/hristiyanlik	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/books/makinelerin-evrimi-4-sanayi-devrimi	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/yazma-teknikleri	chromecache_810.2.dr	false		unknown
https://apis.google.com	chromecache_823.2.dr, chromecache_470.2.dr	false	URL Reputation: safe	unknown
https://www.ekitaprojesi.com/books/mesnevi-i-ii-ve-iii-ciltler	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/books/son-kehanet-i	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/books/from-the-nightmare	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/wp-content/plugins/easy-social-icons/css/font-awesome/css/all.min.css?v	chromecache_810.2.dr	false		unknown
https://www.ekitaprojesi.com/wp-content/plugins/slideshow-jquery-image-gallery/style/SlideshowPlugin	chromecache_810.2.dr	false		unknown

Name	IP	Active	Malicious	Reputation
i.ytimg.com	216.58.212.182	true	false	unknown
widget.boomads.com	83.66.162.128	true	false	unknown
cdn.openshareweb.com	104.26.0.81	true	false	unknown
d-ams1.turn.com	46.228.164.13	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
youtu.be	142.250.186.110	true	false	unknown
static.zdassets.com	216.198.54.3	true	false	unknown
sync.crwdcntrl.net	52.50.157.229	true	false	unknown
cm.g.doubleclick.net	172.217.16.130	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.193	true	false	unknown
ekr.zdassets.com	216.198.53.3	true	false	unknown
facebook.com	157.240.251.35	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
lb.wordpress.com	192.0.78.13	true	false	unknown
v2.zopim.com	104.17.98.195	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
plus.l.google.com	142.250.186.46	true	false	unknown
www.shareaholic.net	54.197.98.98	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	35.157.170.10	true	false	unknown
cdn.shopify.com	23.227.60.200	true	false	unknown
ep2.adtrafficquality.google	142.250.184.193	true	false	unknown
static.doubleclick.net	172.217.16.198	true	false	unknown
youtube-ui.l.google.com	142.250.186.174	true	false	unknown
scontent-sea1-1.xx.fbcdn.net	157.240.3.29	true	false	unknown
googleads.g.doubleclick.net	142.250.186.66	true	false	unknown
dualstack.pinterest.map.fastly.net	151.101.0.84	true	false	unknown
sb.scorecardresearch.com	18.244.18.32	true	false	unknown
ml314.com	34.117.77.79	true	false	unknown
cdn.shareaholic.net	104.26.6.159	true	false	unknown
de.tynt.com	67.202.105.32	true	false	unknown
analytics.shareaholic.com	34.200.129.180	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
i.simpli.fi	35.234.162.151	true	false	unknown
tapestry.tapad.com	34.111.113.62	true	false	unknown
partner.shareaholic.com	107.20.140.231	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	34.250.93.70	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
ekitaprojesi.com	89.163.140.103	true	false	unknown
s6.files.wordpress.com	192.0.72.27	true	false	unknown
video.xx.fbcdn.net	157.240.253.2	true	false	unknown
ep1.adtrafficquality.google	172.217.16.194	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
pixel.shareaholic.com	18.233.206.207	true	false	unknown
aggle.net	15.197.179.7	true	false	unknown
play.google.com	142.250.184.238	true	false	unknown
widget-mediator.zopim.com	3.120.77.119	true	false	unknown
ic.tynt.com	67.202.105.31	true	false	unknown
cookiesync-446990137.us-west-2.elb.amazonaws.com	35.83.87.114	true	false	unknown
ib.anycast.adnxs.com	37.252.171.85	true	false	unknown
recs.shareaholic.com	34.196.120.240	true	false	unknown
muratukray.zendesk.com	216.198.54.1	true	false	unknown
px.owneriq.net	unknown	unknown	false	unknown
sezaikayaoglu.files.wordpress.com	unknown	unknown	false	unknown
www.ekitaprojesi.com	unknown	unknown	false	unknown
platform.twitter.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
a.usbrowserspeed.com	unknown	unknown	false	unknown
d.turn.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
cdn.tynt.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
www.facebook.net	unknown	unknown	false	unknown
sezaikayaoglu.wordpress.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
static.xx.fbcdn.net	unknown	unknown	false	unknown
beacon.krxd.net	unknown	unknown	false	unknown
tags.bluekai.com	unknown	unknown	false	unknown
assets.pinterest.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	dualstack.pinterest.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
151.101.128.84	unknown	United States	54113	FASTLYUS	false
34.250.93.70	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
172.217.16.142	unknown	United States	15169	GOOGLEUS	false
142.250.185.118	unknown	United States	15169	GOOGLEUS	false
35.157.170.10	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
157.240.3.29	scontent-sea1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.185.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.67.74.24	unknown	United States	13335	CLOUDFLARENETUS	false
3.120.77.119	widget-mediator.zopim.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
107.20.147.136	unknown	United States	14618	AMAZON-AESUS	false
216.198.54.3	static.zdassets.com	United States	7321	LNET-ASNUS	false
216.198.54.1	muratukray.zendesk.com	United States	7321	LNET-ASNUS	false
89.163.140.103	ekitaprojesi.com	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
18.233.206.207	pixel.shareaholic.com	United States	14618	AMAZON-AESUS	false
142.250.186.46	plus.l.google.com	United States	15169	GOOGLEUS	false
63.35.71.243	unknown	United States	16509	AMAZON-02US	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
216.58.206.34	unknown	United States	15169	GOOGLEUS	false
23.227.60.200	cdn.shopify.com	Canada	62679	SHOPIFYASN1CA	false
104.26.0.81	cdn.openshareweb.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.38	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
107.20.140.231	partner.shareaholic.com	United States	14618	AMAZON-AESUS	false
172.217.16.129	unknown	United States	15169	GOOGLEUS	false
142.250.185.174	unknown	United States	15169	GOOGLEUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
216.58.212.182	i.ytimg.com	United States	15169	GOOGLEUS	false
15.197.179.7	aggle.net	United States	7430	TANDEMUS	false
172.217.16.130	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.97	unknown	United States	15169	GOOGLEUS	false
37.252.171.21	unknown	European Union	29990	ASN-APPNEXUS	false
83.66.162.128	widget.boomads.com	Turkey	12978	DOGAN-ONLINETR	false
192.0.78.13	lb.wordpress.com	United States	2635	AUTOMATTICUS	false
192.0.78.12	unknown	United States	2635	AUTOMATTICUS	false
35.234.162.151	i.simpli.fi	United States	15169	GOOGLEUS	false
142.250.186.110	youtu.be	United States	15169	GOOGLEUS	false
104.17.98.195	v2.zopim.com	United States	13335	CLOUDFLARENETUS	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
35.83.87.114	cookiesync-446990137.us-west-2.elb.amazonaws.com	United States	237	MERIT-AS-14US	false
142.250.184.193	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false
18.244.18.32	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
192.0.72.27	s6.files.wordpress.com	United States	2635	AUTOMATTICUS	false
18.196.177.92	unknown	United States	16509	AMAZON-02US	false
52.50.157.229	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
199.232.188.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
142.250.184.238	play.google.com	United States	15169	GOOGLEUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
172.217.16.194	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
104.26.6.159	cdn.shareaholic.net	United States	13335	CLOUDFLARENETUS	false
37.252.171.85	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
172.217.16.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.174	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	unknown	United States	15169	GOOGLEUS	false
15.197.193.217	match.adsrvr.org	United States	7430	TANDEMUS	false
67.202.105.32	de.tynt.com	United States	32748	STEADFASTUS	false
67.202.105.31	ic.tynt.com	United States	32748	STEADFASTUS	false
34.200.129.180	analytics.shareaholic.com	United States	14618	AMAZON-AESUS	false
142.250.186.161	unknown	United States	15169	GOOGLEUS	false
67.202.105.34	unknown	United States	32748	STEADFASTUS	false
3.124.156.62	unknown	United States	16509	AMAZON-02US	false
34.111.113.62	tapestry.tapad.com	United States	15169	GOOGLEUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
216.198.53.3	ekr.zdassets.com	United States	7321	LNET-ASNUS	false
54.197.98.98	www.shareaholic.net	United States	14618	AMAZON-AESUS	false
157.240.251.35	facebook.com	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541642
Start date and time:	2024-10-25 01:00:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://ekitaprojesi.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@32/976@237/79
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11041)
Category:	downloaded
Size (bytes):	52409
Entropy (8bit):	5.6281120502734225
Encrypted:	false
SSDEEP:	768:5yDaPQKIZhkIYGiZ1HYu1dH7BJhHuJEzsU230DUNFOIDdKU:DQKIZPiTJPbKzJ
MD5:	A57B9F764B62E131AE3676AC1CDBA079
SHA1:	729A590968CC26F23E28D80AE1E957F38CCE1D58
SHA-256:	7CDF61EF7173ADF480B96A117B5D485CAA796AD922418A6701400D35F2B418E9
SHA-512:	4DFB141EA4034C2A03FD6C83DAA86CC81092BF8AFC852BEB5D6E9FC3D147E86E1F2B857F92DB36AAA990C3DD0C0267A75FCF8BA4FAF1093536670CD8A15FAEC9
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yF/r/sIUfioK8p73.js
Preview:	;/FB_PKG_DELIM/..__d("BinarySearch",["unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";e={GREATEST_LOWER_BOUND:"GREATEST_LOWER_BOUND",GREATEST_STRICT_LOWER_BOUND:"GREATEST_STRICT_LOWER_BOUND",LEAST_STRICT_UPPER_BOUND:"LEAST_STRICT_UPPER_BOUND",LEAST_UPPER_BOUND:"LEAST_UPPER_BOUND",NEAREST:"NEAREST"};var h=function(a,b){if(typeof a!=="number"\|\|typeof b!=="number")throw c("unrecoverableViolation")("The default comparator can only be used with sequences of numbers.","comet_infra");return a-b},i=e.GREATEST_LOWER_BOUND,j=e.GREATEST_STRICT_LOWER_BOUND,k=e.LEAST_STRICT_UPPER_BOUND,l=e.LEAST_UPPER_BOUND,m=e.NEAREST;function n(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d){c=a(f);return e(c,b)===0?c:void 0}else return void 0}function o(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d)return e(a(f),b)===0?f:-1;else return-1}function p(a,b,d,e,f,g){switch(g){case l:return q(a,b,d,e,f);case i:return r(a,b,d,e,f);case k:return s(a,b,d,e,f);case

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 01:01:45.466672897 CEST	431	OUT	GET / HTTP/1.1 Host: ekitaprojesi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 01:01:46.408257008 CEST	505	IN	HTTP/1.1 301 Moved Permanently set-cookie: PHPSESSID=c892bd62dd91e7a848f45e77d7f85ef8; path=/; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 x-pingback: http://www.ekitaprojesi.com/xmlrpc.php x-redirect-by: WordPress - Really Simple Security location: https://ekitaprojesi.com/ content-length: 0 date: Thu, 24 Oct 2024 23:01:46 GMT server: LiteSpeed connection: Keep-Alive

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:47 UTC	659	OUT	GET / HTTP/1.1 Host: ekitaprojesi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:01:47 UTC	658	IN	HTTP/1.1 301 Moved Permanently set-cookie: PHPSESSID=73f728f56034df5460af5b0e4fbc5e90; path=/; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 x-pingback: https://www.ekitaprojesi.com/xmlrpc.php x-redirect-by: WordPress location: https://www.ekitaprojesi.com/ content-length: 0 date: Thu, 24 Oct 2024 23:01:47 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:48 UTC	663	OUT	GET / HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:01:49 UTC	831	IN	HTTP/1.1 200 OK set-cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5; path=/; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 x-pingback: https://www.ekitaprojesi.com/xmlrpc.php link: <https://www.ekitaprojesi.com/wp-json/>; rel="https://api.w.org/" link: <https://www.ekitaprojesi.com/wp-json/wp/v2/pages/1283>; rel="alternate"; title="JSON"; type="application/json" link: <https://www.ekitaprojesi.com/>; rel=shortlink transfer-encoding: chunked date: Thu, 24 Oct 2024 23:01:49 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:49 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2024-10-24 23:01:49 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 45 2d 4b c4 b0 54 41 50 20 50 52 4f 4a 45 53 c4 b0 c2 ae 20 20 2d 20 20 7e 20 54 c3 9c 52 4b c4 b0 59 45 26 23 30 33 39 3b 4e c4 b0 4e 20 65 2d 4b c4 b0 54 41 50 20 50 52 4f 4a 45 53 c4 b0 20 7e 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 6b 69 74 61 70 72 6f 6a 65 73 69 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 6c 6f 67 6f 6c 69 66 65 2d 70 72 6f 5f 76 31 5f 31 5f 34 2f 69 6d 61 67 65 73 Data Ascii: <!DOCTYPE html><html lang="tr"><head><meta charset="UTF-8" /><title>E-KTAP PROJES - ~ TRKYE'NN e-KTAP PROJES ~</title><link rel="apple-touch-icon" href="https://www.ekitaprojesi.com/wp-content/themes/blogolife-pro_v1_1_4/images
2024-10-24 23:01:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 23:01:49 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2024-10-24 23:01:49 UTC	8192	IN	Data Raw: 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 23 66 66 36 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 3a 20 23 66 63 62 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 37 62 64 63 62 35 3b 2d 2d Data Ascii: -color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--
2024-10-24 23:01:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 23:01:49 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2024-10-24 23:01:49 UTC	8192	IN	Data Raw: 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 78 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 Data Ascii: ze: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--w
2024-10-24 23:01:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 23:01:49 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:49 UTC	548	OUT	GET /assets/pub/shareaholic.js HTTP/1.1 Host: cdn.shareaholic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:01:50 UTC	806	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:01:49 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close last-modified: Thu, 05 Sep 2024 11:34:07 GMT etag: W/"05506b2e8f94d86d03547917296fa994" cache-control: max-age=1200, public access-control-allow-origin: * x-shr-origin: S3 x-shr-hello-human: This website grows faster with Shareaholic. CF-Cache-Status: HIT Age: 240 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vy2OZrwVqe815jZpF2XfB%2BvUIlBD7dRLoQZOirdEWrA0Q%2Bn2wslzwah34ecQ4ysjUxGGnSbczsgYSa6JwvZlsOZOcvyNE6vzjar7j0JVDpx1ypKdnQX5Ko9VQBaf8C3r15RxeA8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d974b1ccd315f-DFW
2024-10-24 23:01:50 UTC	563	IN	Data Raw: 32 39 32 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6e 2c 6f 3d 7b 37 33 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 6e 3d 7b 73 68 72 3a 7b 64 65 76 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 74 61 67 65 61 68 6f 6c 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 73 68 65 72 5f 74 6f 6f 6c 73 22 2c 73 74 61 67 65 3a 22 68 74 74 70 73 3a 2f 2f 67 72 61 63 65 2e 73 74 61 67 65 61 68 6f 6c 69 63 2e 63 6f 6d 2f 63 6f 6e 66 69 67 22 2c 70 72 6f 64 75 63 74 69 6f 6e 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 68 61 72 65 61 68 6f 6c 69 63 2e 6e 65 74 2f 63 6f 6e 66 69 67 22 7d 2c Data Ascii: 2921!function(){"use strict";var e,t,r,n,o={7342:function(e,t,r){r.d(t,{Z:function(){return o}});var n={shr:{dev:"https://www.stageaholic.com/publisher_tools",stage:"https://grace.stageaholic.com/config",production:"https://www.shareaholic.net/config"},
2024-10-24 23:01:50 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 69 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 72 2e 62 69 6e 64 28 72 2c 39 35 30 36 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6f 3d 72 2e 67 6c 6f 62 61 6c 2c 63 3d 42 6f 6f 6c 65 61 6e 28 6f 2e 53 68 61 72 65 61 68 6f 6c 69 63 29 3b 69 66 28 74 7c 7c 28 74 3d 22 30 30 30 30 30 22 29 2c 61 2e 63 6f 6e 66 69 67 73 5b 74 5d 29 72 65 74 75 72 6e 20 61 2e 63 6f 6e 66 69 67 73 5b 74 5d 3b 76 61 72 20 73 3d 6e 65 77 20 69 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6f 3d 6e 5b 63 3f 22 73 68 72 22 3a 22 79 61 72 70 70 22 5d 5b 65 5d 3b 6f 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 63 6f 6e 66 69 67 20 65 6e 64 70 6f 69 6e 74 20 66 6f 72 20 22 2b 65 29 2c 72 Data Ascii: return i.resolve().then(r.bind(r,9506)).then((function(r){var o=r.global,c=Boolean(o.Shareaholic);if(t\|\|(t="00000"),a.configs[t])return a.configs[t];var s=new i((function(r){var o=n[c?"shr":"yarpp"][e];o\|\|(console.error("Missing config endpoint for "+e),r
2024-10-24 23:01:50 UTC	1369	IN	Data Raw: 7c 7c 21 6e 2e 53 68 61 72 65 61 68 6f 6c 69 63 29 26 26 28 6e 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7d 2c 34 30 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 50 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 3b 76 61 72 20 6e 3d 50 72 6f 6d 69 73 65 7d 2c 36 34 33 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 73 74 6f 72 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 6e 3d 72 28 39 35 30 36 29 2c 6f 3d 7b 63 6f 6e 66 69 67 73 3a 7b 7d 7d 3b 6e 2e 67 6c 6f 62 61 6c 2e 53 68 61 72 65 61 68 6f 6c 69 63 26 26 6e 2e 67 6c 6f 62 61 6c 2e 53 68 61 72 65 61 68 6f 6c 69 Data Ascii: \|\|!n.Shareaholic)&&(n=window.parent)},4074:function(e,t,r){r.r(t),r.d(t,{Promise:function(){return n}});var n=Promise},6437:function(e,t,r){r.r(t),r.d(t,{storage:function(){return o}});var n=r(9506),o={configs:{}};n.global.Shareaholic&&n.global.Shareaholi
2024-10-24 23:01:50 UTC	1369	IN	Data Raw: 6f 7d 2c 61 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 61 2e 6f 28 74 2c 72 29 26 26 21 61 2e 6f 28 65 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 5b 72 5d 7d 29 7d 2c 61 2e 66 3d 7b 7d 2c 61 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 2e 66 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 66 5b 72 5d 28 65 2c 74 29 2c 74 7d 29 2c 5b 5d 29 29 7d 2c 61 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 31 31 3a 22 72 65 63 5f 63 61 72 64 Data Ascii: o},a.d=function(e,t){for(var r in t)a.o(t,r)&&!a.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},a.f={},a.e=function(e){return Promise.all(Object.keys(a.f).reduce((function(t,r){return a.f[r](e,t),t}),[]))},a.u=function(e){return{11:"rec_card
2024-10-24 23:01:50 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 2c 6e 29 7b 63 2e 6f 6e 65 72 72 6f 72 3d 63 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 70 29 3b 76 61 72 20 6f 3d 72 5b 65 5d 3b 69 66 28 64 65 6c 65 74 65 20 72 5b 65 5d 2c 63 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 63 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 29 2c 6f 26 26 6f 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 6e 29 7d 29 29 2c 74 29 72 65 74 75 72 6e 20 74 28 6e 29 7d 2c 70 3d 73 65 74 54 69 6d 65 6f 75 74 28 64 2e 62 69 6e 64 28 6e 75 6c 6c 2c 76 6f 69 64 20 30 2c 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 63 7d 29 2c 31 32 65 34 29 3b 63 2e 6f 6e 65 72 72 6f 72 3d 64 2e 62 69 6e 64 28 Data Ascii: ion(t,n){c.onerror=c.onload=null,clearTimeout(p);var o=r[e];if(delete r[e],c.parentNode&&c.parentNode.removeChild(c),o&&o.forEach((function(e){return e(n)})),t)return t(n)},p=setTimeout(d.bind(null,void 0,{type:"timeout",target:c}),12e4);c.onerror=d.bind(
2024-10-24 23:01:50 UTC	1369	IN	Data Raw: 2c 6f 2c 69 3d 72 5b 30 5d 2c 63 3d 72 5b 31 5d 2c 73 3d 72 5b 32 5d 2c 75 3d 30 3b 69 66 28 69 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 65 5b 74 5d 7d 29 29 29 7b 66 6f 72 28 6e 20 69 6e 20 63 29 61 2e 6f 28 63 2c 6e 29 26 26 28 61 2e 6d 5b 6e 5d 3d 63 5b 6e 5d 29 3b 69 66 28 73 29 73 28 61 29 7d 66 6f 72 28 74 26 26 74 28 72 29 3b 75 3c 69 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 6f 3d 69 5b 75 5d 2c 61 2e 6f 28 65 2c 6f 29 26 26 65 5b 6f 5d 26 26 65 5b 6f 5d 5b 30 5d 28 29 2c 65 5b 69 5b 75 5d 5d 3d 30 7d 2c 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 70 75 62 6c 69 73 68 65 72 5f 73 64 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 70 75 62 6c 69 73 68 65 72 5f 73 64 6b 7c 7c 5b 5d 3b Data Ascii: ,o,i=r[0],c=r[1],s=r[2],u=0;if(i.some((function(t){return 0!==e[t]}))){for(n in c)a.o(c,n)&&(a.m[n]=c[n]);if(s)s(a)}for(t&&t(r);u<i.length;u++)o=i[u],a.o(e,o)&&e[o]&&e[o][0](),e[i[u]]=0},r=self.webpackChunkpublisher_sdk=self.webpackChunkpublisher_sdk\|\|[];
2024-10-24 23:01:50 UTC	1369	IN	Data Raw: 22 53 68 61 72 65 61 68 6f 6c 69 63 22 29 3b 28 73 3d 6c 29 2e 69 6e 69 74 5f 62 6f 6f 6b 6d 61 72 6b 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 72 3c 65 3b 72 2b 2b 29 74 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 73 2e 70 75 73 68 28 5b 22 73 68 61 72 65 22 2c 7b 73 65 72 76 69 63 65 3a 22 61 6c 6c 22 7d 5d 2e 63 6f 6e 63 61 74 28 74 29 29 7d 2c 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 72 3c 65 3b 72 2b 2b 29 74 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d Data Ascii: "Shareaholic");(s=l).init_bookmarklet=function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];s.push(["share",{service:"all"}].concat(t))},s.init=function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r]
2024-10-24 23:01:50 UTC	1369	IN	Data Raw: 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 53 48 52 5f 56 32 5f 4f 56 45 52 52 49 44 45 53 22 29 29 3b 70 26 26 70 2e 73 63 72 69 70 74 26 26 21 72 2e 53 48 52 5f 4f 56 45 52 52 49 44 45 5f 4d 4f 44 45 26 26 28 69 2e 61 73 73 65 74 62 61 73 65 3d 70 2e 73 63 72 69 70 74 2e 61 73 73 65 74 62 61 73 65 2c 69 2e 69 6d 61 67 65 62 61 73 65 3d 70 2e 73 63 72 69 70 74 2e 69 6d 61 67 65 62 61 73 65 2c 69 2e 66 6f 6e 74 62 61 73 65 3d 70 2e 73 63 72 69 70 74 2e 66 6f 6e 74 62 61 73 65 2c 69 2e 6f 76 65 72 72 69 64 65 73 3d 21 30 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 69 7d 28 6f 29 3b 69 66 28 6f 26 26 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 2c 66 2e 6f 76 65 72 72 69 64 65 73 26 Data Ascii: (localStorage.getItem("SHR_V2_OVERRIDES"));p&&p.script&&!r.SHR_OVERRIDE_MODE&&(i.assetbase=p.script.assetbase,i.imagebase=p.script.imagebase,i.fontbase=p.script.fontbase,i.overrides=!0)}catch(e){}return i}(o);if(o&&o.parentNode.removeChild(o),f.overrides&
2024-10-24 23:01:50 UTC	391	IN	Data Raw: 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6f 70 65 6e 73 68 61 72 65 77 65 62 2e 63 6f 6d 2f 76 32 2f 22 7d 2c 22 73 68 61 72 65 61 68 6f 6c 69 63 2e 6a 73 22 2c 22 73 68 72 22 2c 22 53 68 61 72 65 61 68 6f 6c 69 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6c 2c 72 3d 74 2e 73 65 74 74 69 6e 67 73 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 76 61 72 20 6f 3d 72 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 3b 28 30 2c 65 2e 5a 29 28 6f 2c 6e 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 70 75 62 6c 69 73 68 65 72 43 6f 6e 66 69 67 4c 6f 61 64 65 64 3d 21 30 2c 74 2e 70 75 73 68 28 5b 22 69 6e 69 74 22 2c 6e 2c 65 5d 29 7d 29 29 2c 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 72 2e 73 69 74 65 69 64 3d 6e 7d 72 Data Ascii: :"https://cdn.openshareweb.com/v2/"},"shareaholic.js","shr","Shareaholic",(function(){var t=l,r=t.settings;function n(n){var o=r.environment;(0,e.Z)(o,n).then((function(e){u.publisherConfigLoaded=!0,t.push(["init",n,e])})),t.init=function(){},r.siteid=n}r
2024-10-24 23:01:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 23:01:50 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236632 Date: Thu, 24 Oct 2024 23:01:50 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:50 UTC	639	OUT	GET /wp-content/themes/blogolife-pro_v1_1_4/style.css HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:50 UTC	500	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:50 GMT etag: "7b83-59446e63-c7026a0;;;" last-modified: Fri, 16 Jun 2017 23:48:51 GMT content-type: text/css content-length: 31619 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:50 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 2f 2a 0d 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 42 6c 6f 67 6f 4c 69 66 65 50 52 4f 0d 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 70 6c 6f 6f 6b 2e 63 6f 6d 2f 62 6c 6f 67 6f 6c 69 66 65 70 72 6f 0d 0a 41 75 74 68 6f 72 3a 20 57 50 6c 6f 6f 6b 20 54 65 61 6d 0d 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 70 6c 6f 6f 6b 2e 63 6f 6d 2f 0d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 42 6c 6f 67 6f 4c 69 66 65 20 50 52 4f 20 69 73 20 61 20 73 69 6d 70 6c 65 20 61 6e 64 20 70 65 72 66 65 63 74 20 48 54 4d 4c 35 26 43 53 53 33 20 74 68 65 6d 65 20 66 6f 72 20 70 65 72 73 6f 6e 61 6c 20 62 6c 6f 67 67 69 6e 67 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 70 6f 73 74 20 66 6f 72 6d 61 74 73 2c 20 61 6e 64 20 73 65 76 65 72 61 6c Data Ascii: /*Theme Name: BlogoLifePROTheme URI: http://wplook.com/blogolifeproAuthor: WPlook TeamAuthor URI: http://wplook.com/Description: BlogoLife PRO is a simple and perfect HTML5&CSS3 theme for personal blogging that supports post formats, and several
2024-10-24 23:01:50 UTC	15235	IN	Data Raw: 78 2d 77 69 64 74 68 3a 20 35 36 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 70 2d 63 61 70 74 69 6f 6e 20 69 6d 67 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 20 33 70 78 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 70 2d 63 61 70 74 69 6f 6e 20 61 20 69 6d 67 20 7b 0d 0a 09 77 69 64 74 68 3a 39 38 25 0d 0a 7d 0d 0a 0d 0a 2e 77 70 2d 63 61 70 74 69 6f 6e 20 70 2e 77 70 2d 63 61 70 74 69 6f 6e 2d 74 65 78 74 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 38 38 38 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 33 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 7d 0d 0a Data Ascii: x-width: 565px !important;padding: 0px;text-align: center;}.wp-caption img {margin: 5px 3px 0;}.wp-caption a img {width:98%}.wp-caption p.wp-caption-text {color: #888;font-size: 12px;margin: 3px;padding: 0px;}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://ekitaprojesi.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 369

Chrome Cache Entry: 370

Chrome Cache Entry: 371

Chrome Cache Entry: 372

Chrome Cache Entry: 373

Chrome Cache Entry: 374

Chrome Cache Entry: 375

Chrome Cache Entry: 376

Chrome Cache Entry: 377

Chrome Cache Entry: 378

Chrome Cache Entry: 379

Chrome Cache Entry: 380

Chrome Cache Entry: 381

Chrome Cache Entry: 382

Chrome Cache Entry: 383

Chrome Cache Entry: 384

Chrome Cache Entry: 385

Chrome Cache Entry: 386

Chrome Cache Entry: 387

Chrome Cache Entry: 388

Chrome Cache Entry: 389

Chrome Cache Entry: 390

Chrome Cache Entry: 391

Chrome Cache Entry: 392

Chrome Cache Entry: 393

Chrome Cache Entry: 394

Windows Analysis Report
http://ekitaprojesi.com/

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:50 UTC	670	OUT	GET /wp-content/plugins/easy-social-icons/css/font-awesome/css/all.min.css?ver=5.7.2 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:50 UTC	500	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:50 GMT etag: "d4b8-66d8180c-c7036dd;;;" last-modified: Wed, 04 Sep 2024 08:19:24 GMT content-type: text/css content-length: 54456 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:50 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 30 36 36 37 65 6d 7d Data Ascii: .fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 36 64 35 22 7d 2e 66 61 2d 64 72 61 77 2d 70 6f 6c 79 67 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 65 22 7d 2e 66 61 2d 64 72 69 62 62 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 64 22 7d 2e 66 61 2d 64 72 69 62 62 62 6c 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 37 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 62 22 7d 2e 66 61 2d 64 72 75 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 36 39 22 7d 2e 66 61 2d 64 72 75 6d 2d 73 74 65 65 6c 70 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 36 61 22 7d 2e 66 61 2d 64 72 75 6d 73 74 69 63 6b 2d 62 Data Ascii: tent:"\f6d5"}.fa-draw-polygon:before{content:"\f5ee"}.fa-dribbble:before{content:"\f17d"}.fa-dribbble-square:before{content:"\f397"}.fa-dropbox:before{content:"\f16b"}.fa-drum:before{content:"\f569"}.fa-drum-steelpan:before{content:"\f56a"}.fa-drumstick-b
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 7d 2e 66 61 2d 6d 6f 75 73 65 2d 70 6f 69 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 35 22 7d 2e 66 61 2d 6d 75 67 2d 68 6f 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 62 36 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 6e 61 70 73 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 32 22 7d 2e 66 61 2d 6e 65 6f 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 31 32 22 7d 2e 66 61 2d 6e 65 74 77 6f 72 6b 2d 77 69 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 66 66 22 7d 2e 66 61 2d 6e 65 75 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 63 22 7d 2e 66 61 Data Ascii: }.fa-mouse-pointer:before{content:"\f245"}.fa-mug-hot:before{content:"\f7b6"}.fa-music:before{content:"\f001"}.fa-napster:before{content:"\f3d2"}.fa-neos:before{content:"\f612"}.fa-network-wired:before{content:"\f6ff"}.fa-neuter:before{content:"\f22c"}.fa
2024-10-24 23:01:50 UTC	5304	IN	Data Raw: 22 7d 2e 66 61 2d 75 73 65 72 2d 67 72 61 64 75 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 30 31 22 7d 2e 66 61 2d 75 73 65 72 2d 69 6e 6a 75 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 32 38 22 7d 2e 66 61 2d 75 73 65 72 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 30 32 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 30 33 22 7d 2e 66 61 2d 75 73 65 72 2d 6e 69 6e 6a 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 30 34 22 7d 2e 66 61 2d 75 73 65 72 2d 6e 75 72 73 65 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: "}.fa-user-graduate:before{content:"\f501"}.fa-user-injured:before{content:"\f728"}.fa-user-lock:before{content:"\f502"}.fa-user-md:before{content:"\f0f0"}.fa-user-minus:before{content:"\f503"}.fa-user-ninja:before{content:"\f504"}.fa-user-nurse:before{co

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:50 UTC	649	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.2 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:50 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:50 GMT etag: "1b72b-66e0d1c5-c74385c;;;" last-modified: Tue, 10 Sep 2024 23:09:57 GMT content-type: text/css content-length: 112427 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:50 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 Data Ascii: ock-cover.has-background-dim.has-background-dim-90 .wp-block-cover__background,.wp-block-cover.has-background-dim.has-background-dim-90 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-90:not(.has-background-gradi
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 20 66 69 67 75 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 20 66 69 67 75 72 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6d 61 72 67 69 6e 3a 30 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 Data Ascii: -gallery:not(.has-nested-images) .blocks-gallery-image figure,.wp-block-gallery:not(.has-nested-images) .blocks-gallery-item figure{align-items:flex-end;display:flex;height:100%;justify-content:flex-start;margin:0}.blocks-gallery-grid:not(.has-nested-imag
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 66 69 67 63 61 70 74 69 6f 6e 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 2e 69 73 2d 73 74 79 6c 65 2d 63 69 72 63 6c 65 2d 6d 61 73 6b 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 7d 40 73 75 70 70 6f 72 74 73 20 28 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 20 6f 72 20 28 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 29 20 6f 72 20 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 Data Ascii: er{margin-left:auto;margin-right:auto}.wp-block-image :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-image.is-style-circle-mask img{border-radius:9999px}@supports ((-webkit-mask-image:none) or (mask-image:none)) or (-webkit-mask-image:none
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 5f 5f 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 29 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 61 67 65 2d 6c 69 73 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6c 6f 73 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 Data Ascii: lock-navigation-item__content:not(.wp-block-navigation-submenu__toggle){padding:0}.wp-block-navigation .wp-block-page-list,.wp-block-navigation__container,.wp-block-navigation__responsive-close,.wp-block-navigation__responsive-container,.wp-block-navigati
2024-10-24 23:01:50 UTC	16384	IN	Data Raw: 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 7b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 3a 77 68 65 72 65 28 2e 61 6c 69 67 6e 6c 65 66 74 2c 2e 61 6c 69 67 6e 72 69 67 68 74 29 7b 77 69 64 74 68 3a 31 Data Ascii: eatured-image .wp-block-post-featured-image__overlay.has-background-dim-90{opacity:.9}.wp-block-post-featured-image .wp-block-post-featured-image__overlay.has-background-dim-100{opacity:1}.wp-block-post-featured-image:where(.alignleft,.alignright){width:1
2024-10-24 23:01:50 UTC	14123	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 23 31 64 61 31 66 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 69 6d 65 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 62 37 65 61 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 38 30 63 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a Data Ascii: d-color:#1da1f2;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-vimeo{background-color:#1eb7ea;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-vk{background-color:#4680c2;color:#fff}:

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:50 UTC	660	OUT	GET /wp-content/plugins/accesspress-social-icons/css/animate.css?ver=1.8.5 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:50 UTC	501	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:50 GMT etag: "11cda-62b2f77a-c72083e;;;" last-modified: Wed, 22 Jun 2022 11:05:30 GMT content-type: text/css content-length: 72922 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:50 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:51 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 2a 2f 0a 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 2d 77 65 62 6b 69 74 Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateLicensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2014 Daniel Eden/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit
2024-10-24 23:01:51 UTC	16384	IN	Data Raw: 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 20 7b 0a 20 20 30 25 2c 20 36 30 25 2c 20 37 35 25 2c 20 39 30 25 2c 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0a 20 20 7d 0a 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a Data Ascii: @-webkit-keyframes bounceInRight { 0%, 60%, 75%, 90%, 100% { -webkit-transition-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); transition-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); } 0% { opacity: 0;
2024-10-24 23:01:51 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 4f 75 74 55 70 42 69 67 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 31 2c 20 30 2c 20 2d 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 31 2c 20 30 2c 20 2d 33 36 30 64 65 67 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 Data Ascii: animation-name: fadeOutUpBig;}@-webkit-keyframes flip { 0% { -webkit-transform: perspective(400px) rotate3d(0, 1, 0, -360deg); transform: perspective(400px) rotate3d(0, 1, 0, -360deg); -webkit-animation-timing-function: ea
2024-10-24 23:01:51 UTC	16384	IN	Data Raw: 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 32 30 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 32 30 30 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 0a 2e 72 6f 74 61 74 65 4f 75 74 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 6f 74 61 74 65 4f 75 74 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 6f 74 61 74 65 4f 75 74 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 Data Ascii: sform-origin: center; -webkit-transform: rotate3d(0, 0, 1, 200deg); transform: rotate3d(0, 0, 1, 200deg); opacity: 0; }}.rotateOut { -webkit-animation-name: rotateOut; animation-name: rotateOut;}@-webkit-keyframes r
2024-10-24 23:01:51 UTC	7386	IN	Data Raw: 72 3b 0a 20 20 7d 0a 7d 0a 0a 2e 7a 6f 6f 6d 4f 75 74 4c 65 66 74 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 7a 6f 6f 6d 4f 75 74 4c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 7a 6f 6f 6d 4f 75 74 4c 65 66 74 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 7a 6f 6f 6d 4f 75 74 52 69 67 68 74 20 7b 0a 20 20 34 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 20 2e 34 37 35 2c 20 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 34 32 70 78 2c 20 30 2c 20 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e Data Ascii: r; }}.zoomOutLeft { -webkit-animation-name: zoomOutLeft; animation-name: zoomOutLeft;}@-webkit-keyframes zoomOutRight { 40% { opacity: 1; -webkit-transform: scale3d(.475, .475, .475) translate3d(-42px, 0, 0); tran

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 23:01:51 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236631 Date: Thu, 24 Oct 2024 23:01:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 23:01:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:51 UTC	643	OUT	GET /wp-content/plugins/buy-this-book/style.css?ver=6.6.2 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:51 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:51 GMT etag: "123-577cb0b9-c702fb0;;;" last-modified: Wed, 06 Jul 2016 07:18:17 GMT content-type: text/css content-length: 291 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:51 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:51 UTC	291	IN	Data Raw: 2e 62 75 79 62 6f 6f 6b 20 2e 62 6f 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 77 69 64 74 68 3a 20 31 30 35 70 78 3b 20 7d 0a 2e 62 75 79 62 6f 6f 6b 20 2e 62 6f 78 20 69 6d 67 20 7b 20 6d 61 72 67 69 6e 3a 20 33 70 78 20 33 70 78 20 30 70 78 20 30 70 78 3b 20 7d 0a 2e 62 75 79 62 6f 6f 6b 20 2e 62 74 62 61 6c 69 67 6e 20 7b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 20 7d 0a 2e 62 75 79 62 6f 6f 6b 20 2e 74 6f 67 67 6c 65 20 7b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 7d 0a 2e 62 75 79 62 6f 6f 6b 20 2e 64 75 61 6c 63 6f 6c 75 6d 6e 20 7b 20 77 69 64 74 68 3a 20 34 35 25 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 25 3b 20 7d 0a 2e 62 75 79 62 6f 6f 6b 20 2e 74 72 69 63 6f 6c 75 Data Ascii: .buybook .box { display: none; width: 105px; }.buybook .box img { margin: 3px 3px 0px 0px; }.buybook .btbalign { float: left; margin-right: 5px; }.buybook .toggle { float: left; }.buybook .dualcolumn { width: 45%; margin-right: 5%; }.buybook .tricolu

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:51 UTC	668	OUT	GET /wp-content/plugins/showeblogin-facebook-page-like-box/css/style.css?ver=6.6.2 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:51 UTC	496	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:51 GMT etag: "7f-6508526c-c702f5b;;;" last-modified: Mon, 18 Sep 2023 13:36:44 GMT content-type: text/css content-length: 127 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:51 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:51 UTC	127	IN	Data Raw: 2e 66 62 2d 70 61 67 65 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 66 62 2d 70 61 67 65 20 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 6e 6f 2d 6f 70 65 6e 2d 71 75 6f 74 65 3b 0d 0a 7d Data Ascii: .fb-page blockquote { border: none;text-align: center;}.fb-page blockquote:before { content: no-open-quote;}

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:51 UTC	647	OUT	GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:51 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:51 GMT etag: "176-645b9965-c7035c0;;;" last-modified: Wed, 10 May 2023 13:17:25 GMT content-type: text/css content-length: 374 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:51 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:51 UTC	374	IN	Data Raw: 2f 2a 0a 44 65 66 61 75 6c 74 20 73 74 79 6c 65 20 66 6f 72 20 57 50 2d 50 61 67 65 4e 61 76 69 20 70 6c 75 67 69 6e 0a 0a 68 74 74 70 3a 2f 2f 77 6f 72 64 70 72 65 73 73 2e 6f 72 67 2f 65 78 74 65 6e 64 2f 70 6c 75 67 69 6e 73 2f 77 70 2d 70 61 67 65 6e 61 76 69 2f 0a 2a 2f 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 61 2c 20 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 73 70 61 6e 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 42 46 42 46 42 46 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 35 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 32 70 78 3b 0a 7d 0a 0a 2e 77 70 2d 70 Data Ascii: /Default style for WP-PageNavi pluginhttp://wordpress.org/extend/plugins/wp-pagenavi//.wp-pagenavi {clear: both;}.wp-pagenavi a, .wp-pagenavi span {text-decoration: none;border: 1px solid #BFBFBF;padding: 3px 5px;margin: 2px;}.wp-p

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:51 UTC	654	OUT	GET /wp-content/plugins/mybooktable/css/frontend-style.css?ver=3.3.9 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:51 UTC	500	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:51 GMT etag: "91be-6684e17c-c881b0a;;;" last-modified: Wed, 03 Jul 2024 05:28:28 GMT content-type: text/css content-length: 37310 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:51 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:52 UTC	16384	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 20 47 65 6e 65 72 61 6c 20 42 6f 6f 6b 20 53 74 79 6c 69 6e 67 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2e 6d 62 74 2d 62 6f 6f 6b 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 Data Ascii: /---------------------------------------------------------//* General Book Styling //---------------------------------------------------------*/.mbt-book {clear: both;padding-bottom: 10px;font-family: Helve
2024-10-24 23:01:52 UTC	16384	IN	Data Raw: 6f 64 72 65 61 64 73 2d 77 69 64 67 65 74 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 65 6f 72 67 69 61 2c 20 73 65 72 69 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 6d 62 74 2d 62 6f 6f 6b 20 23 67 6f 6f 64 72 65 61 64 73 2d 77 69 64 67 65 74 20 68 31 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 42 42 42 35 39 36 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 6d 61 72 67 Data Ascii: odreads-widget {font-family: georgia, serif;background-color: white;margin-top: 30px;padding: 20px;clear: both;}.mbt-book #goodreads-widget h1 {font-weight:normal;font-size: 16px;border-bottom: 1px solid #BBB596;margin-bottom: 0;marg
2024-10-24 23:01:52 UTC	4542	IN	Data Raw: 64 69 75 73 3a 20 30 70 78 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 6d 62 74 2d 74 61 78 6f 6e 6f 6d 79 2d 6c 69 73 74 69 6e 67 20 2e 6d 62 74 2d 74 61 78 6f 6e 6f 6d 79 20 2e 6d 62 74 2d 74 61 78 6f 6e 6f 6d 79 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 Data Ascii: dius: 0px;box-shadow: none;border: none;background: transparent;padding: 0;margin: 0;}.mbt-taxonomy-listing .mbt-taxonomy .mbt-taxonomy-description {border-radius: 2px;-moz-border-radius: 2px;-webkit-border-radius: 2px;background: whi

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:52 UTC	655	OUT	GET /wp-content/plugins/mybooktable/styles/golden/style.css?ver=3.3.9 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:52 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:52 GMT etag: "67a-6684e17c-c881bbb;;;" last-modified: Wed, 03 Jul 2024 05:28:28 GMT content-type: text/css content-length: 1658 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:52 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:52 UTC	1658	IN	Data Raw: 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2f 2a 20 55 6e 69 76 65 72 73 61 6c 20 42 75 79 20 42 75 74 74 6f 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2e 6d 62 74 2d 62 6f 6f 6b 2d 62 75 79 62 75 74 74 6f 6e 73 20 2e 6d 62 74 2d 75 6e 69 76 65 72 73 61 6c 2d 62 75 79 62 75 74 74 6f 6e 2c 0a 2e 6d 62 74 2d 62 6f 6f 6b 2d 62 75 79 62 75 74 74 6f 6e 73 Data Ascii: /---------------------------------------------------------//* Universal Buy Button //---------------------------------------------------------*/.mbt-book-buybuttons .mbt-universal-buybutton,.mbt-book-buybuttons

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:01:52 UTC	657	OUT	GET /wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.12.3 HTTP/1.1 Host: www.ekitaprojesi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ekitaprojesi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=cf544b6fb844412582ab1a6cefc5acb5
2024-10-24 23:01:52 UTC	500	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 31 Oct 2024 23:01:52 GMT etag: "4a8a-66f424d8-c881da0;;;" last-modified: Wed, 25 Sep 2024 14:57:28 GMT content-type: text/css content-length: 19082 accept-ranges: bytes date: Thu, 24 Oct 2024 23:01:52 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-24 23:01:52 UTC	16384	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 61 73 6c 41 6e 46 61 64 65 49 6e 44 72 6f 70 20 7b 0a 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 70 78 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 30 29 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 61 73 6c 41 6e 46 61 64 65 49 6e 44 72 6f 70 20 7b 0a 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 74 Data Ascii: @keyframes aslAnFadeInDrop { 0% { opacity: 0; transform: translate(0, -50px); } 100% { opacity: 1; transform: translate(0, 0); }}@-webkit-keyframes aslAnFadeInDrop { 0% { opacity: 0; t
2024-10-24 23:01:52 UTC	2698	IN	Data Raw: 6e 74 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 7d 0a 0a 64 69 76 2e 61 73 6c 5f 73 2e 73 65 61 72 63 68 73 65 74 74 69 6e 67 73 2e 69 65 37 38 20 2e 61 73 6c Data Ascii: nt; line-height: 17px; text-align: center; text-decoration: none; text-shadow: none; display: block; font-size: 11px !important; position: absolute; top: 0; left: 0; z-index: 1;}div.asl_s.searchsettings.ie78 .asl