{"report_id":"036de681-27dd-49dc-bd36-94dd597c197b","version":6,"status":"done","tags":[],"date":"2026-02-20T16:30:40Z","url":{"schema":"https","addr":"betoffice-giris2026adresi.com/","fqdn":"betoffice-giris2026adresi.com","domain":"betoffice-giris2026adresi.com","tld":"com"},"ip":{"addr":"104.21.50.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"betoffice-giris2026adresi.com/","fqdn":"betoffice-giris2026adresi.com","domain":"betoffice-giris2026adresi.com","tld":"com"},"title":"Betoffice | Giriş 2026 Adresi (Hızlı, Mobil Uyumlu)","dom":{"size":37061,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"586e9d4145594c4e02d14758423c188a","sha1":"ec1468cd8bd7365cef9fd8291cc421d587902511","sha256":"e8e866167148c37c838ea81ca3e1c7ff181e451012671b7671796b8108609edb","sha512":"ce3c345845150afa9be1be169559f3ef5c7f3d763e135157ea5a4e309ed2ef66aab47e8615a5810378d20775ed4f7b74e369de7781a791643d17fd223830e35b","ssdeep":"768:hprJfd1pDGrIUzH8bg7aPcNySQD20yqCEm:hbd1pDGrIUzcbg7aPcNyh60yfEm","tlshash":"dff2e762c2e3182f6523638da7f6478fa5b69203c411d459bb6e176c0f8edced5a360c","dom_hash":"domhash530c317a203ac4632b9ff7590f187f03","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"betoffice-giris2026adresi.com/","fqdn":"betoffice-giris2026adresi.com","domain":"betoffice-giris2026adresi.com","tld":"com"},"ip":{"addr":"104.21.50.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-27T16:30:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"betoffice-giris2026adresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"betoffice-giris2026adresi.com","ip":{"addr":"104.21.50.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-13","domain_rank":0,"first_seen":"2026-02-20T16:30:40.881265Z","last_seen":"2026-02-20T16:30:40.881265Z","alert_count":3,"request_count":3,"received_data":61951,"sent_data":1437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"betoffice-giris2026adresi.com/","fqdn":"betoffice-giris2026adresi.com","domain":"betoffice-giris2026adresi.com","tld":"com"},"ip":{"addr":"104.21.50.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2a5d511c6128614929e6e4944a2a918","sha1":"1668af378925f70e4c6084803bdc6b54124a8150","sha256":"5d98066cec5e4735c6e19fb5bae515fde8e05342191c0f73dc03007d568962d2","sha512":"a847f26e5415474f46276a39d33a19d6738deec0ec2728cc8895920d8b63c3eb9ef1047ab545865ef1252210b34e870f4161410861904bdf85765eb6127b83ce","ssdeep":"","tlshash":"68f09eab12a334381af7229ea767e3d97c27202b7156e4423f1ccb6c0f11403a1534f5","size":538,"data":"","first_seen":"2026-02-20T16:30:44.593773Z","last_seen":"2026-02-20T17:48:58.736674Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"betoffice-giris2026adresi.com/","fqdn":"betoffice-giris2026adresi.com","domain":"betoffice-giris2026adresi.com","tld":"com"},"ip":{"addr":"104.21.50.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T16:30:19.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betoffice-giris2026adresi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 13:02:25 GMT","end":"Thu, 14 May 2026 14:00:46 GMT"},"fingerprint":{"sha1":"0C:49:1B:7E:90:09:60:91:13:8A:0B:34:D4:15:5E:D2:68:61:D9:63","sha256":"BB:A6:9A:CF:2A:0A:89:04:F8:11:33:6A:7E:9A:F6:77:4C:A3:BE:C4:7E:7F:90:79:4D:0E:15:EF:A5:E0:18:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: betoffice-giris2026adresi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 16:30:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.30\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y37BESUbD2InATv0g5gjCzjILmZbIyx%2FCJAjGRNcnvwdOqqL7pDuxdg9zxnj%2BvdtXHKZPyl5m4wHAVMOs0W05XQA3WMvyA6OX71kX%2BD58PK8VSrpsrd%2FPyI7fNQD\"}]}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d0f634adf59acd4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":37999,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339), with CRLF line terminators","md5":"63d8d3629131ba8cef1d4392f81d84c0","sha1":"254e21c2570d4b64b08360365d7dba1913361744","sha256":"4c21476edeca544b4cee693d395dc0b06ccf6466e9218520ef8c435116eb68f6","sha512":"4bb9e895cac0a5501cf6454143a916c7b2d76988d07f9a01e161d2f8dbb87ca703cccba76f530c1ad28dcf20ace8a707ff701298e9335d4c6ee6b2d28bf65779","ssdeep":"384:29ZoWL2WoC6wM/rCAJLmFDul8rxsxf9hAdyza00kp/FLDq:wZtNof/rCAJSFKlixwfnAdyza008dq","tlshash":"7f03b822c1c2281f6533538debe2478ef6b65207c201555abbbe135b0fbbd9dd153908","first_seen":"2026-02-20T16:30:44.590542Z","last_seen":"2026-02-20T17:48:58.729941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":123,"dns":70,"connect":8,"send":0,"wait":226,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"betoffice-giris2026adresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betoffice-giris2026adresi.com/apple-touch-icon.png","fqdn":"betoffice-giris2026adresi.com","domain":"betoffice-giris2026adresi.com","tld":"com"},"ip":{"addr":"104.21.50.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betoffice-giris2026adresi.com/","date":"2026-02-20T16:30:19.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betoffice-giris2026adresi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 13:02:25 GMT","end":"Thu, 14 May 2026 14:00:46 GMT"},"fingerprint":{"sha1":"0C:49:1B:7E:90:09:60:91:13:8A:0B:34:D4:15:5E:D2:68:61:D9:63","sha256":"BB:A6:9A:CF:2A:0A:89:04:F8:11:33:6A:7E:9A:F6:77:4C:A3:BE:C4:7E:7F:90:79:4D:0E:15:EF:A5:E0:18:58"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: betoffice-giris2026adresi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betoffice-giris2026adresi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Feb 2026 16:30:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 13 Feb 2026 10:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20723\r\ndate: Fri, 20 Feb 2026 16:30:19 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gc73Bs%2FceaA7Nya5RaSWqTA%2FhOROjaR014Y5Oq1j4yNwWMP16KklnCW%2FhXFeT8al7P0mXLwB6HhfprOWPtWuaRIV25tJux33SyNRBZ18q9mfcxhqdiEyP2glxEWs\"}]}\r\ncf-ray: 9d0f634df8535621-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d718b74537dce21bb59a371a90249f77","sha1":"0520eb09cfd311e2eedc92bb2b87a58fc674c180","sha256":"c96bef486a033c53715025e22481b340d1317a1ba3124d8d837fdbf57e297eca","sha512":"d7467a0defae05f2a6fd7bf943a687e407b74d1e10e563da3f469971f1ca629caef56157a94a9724e40b717a302211d82accb621c8ccda22a38a79388c8adc2a","ssdeep":"384:a8AXNo836RQYS5w0E142t/q+gKPo2rRgDQ3kJF0rnPEUp1EmuXvp:a8A288QYS5k3q+JPNrRg/JF0bEUpMp","tlshash":"a692d1c778599153fcbabdb1473f96844dc0f120052a3b1fd61d1a6baa07894a70e770","first_seen":"2026-02-20T16:30:44.591607Z","last_seen":"2026-02-20T17:48:58.73429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"betoffice-giris2026adresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betoffice-giris2026adresi.com/favicon.svg","fqdn":"betoffice-giris2026adresi.com","domain":"betoffice-giris2026adresi.com","tld":"com"},"ip":{"addr":"104.21.50.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betoffice-giris2026adresi.com/","date":"2026-02-20T16:30:19.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betoffice-giris2026adresi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 13:02:25 GMT","end":"Thu, 14 May 2026 14:00:46 GMT"},"fingerprint":{"sha1":"0C:49:1B:7E:90:09:60:91:13:8A:0B:34:D4:15:5E:D2:68:61:D9:63","sha256":"BB:A6:9A:CF:2A:0A:89:04:F8:11:33:6A:7E:9A:F6:77:4C:A3:BE:C4:7E:7F:90:79:4D:0E:15:EF:A5:E0:18:58"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: betoffice-giris2026adresi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betoffice-giris2026adresi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 27 Feb 2026 16:30:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Feb 2026 10:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 713\r\ndate: Fri, 20 Feb 2026 16:30:19 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tK5BWQ8Dn6eM4s38U9FjSb2REZK3zbfi8rzxl%2Ft%2FgnXFWA8ChonTpWgmvWBoBr8vHw4%2FW1Xpxo2AJfr91ADccIBLzvELVdG%2Bb1SuJLqtkAxjC8mUN6BGA1KxcopK\"}]}\r\ncf-ray: 9d0f634df8545621-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"039df6349ee33cd23ce7723fbe52a708","sha1":"6d63fa0b77d3f2fb1cd0add40f6cf765cb413ef7","sha256":"a98e58d3765d476731e2e3222530c32ce49787aa2ee4255a67d0bbbd1882f2cb","sha512":"5dcb624dcaed61b508d4243d53c1de7a396c54b30675cfdfbeb745e4bf459cf4124e56b3e2cd2d56af0c61e4391de6e2fd5b14b25146eba8418e014eec690f69","ssdeep":"","tlshash":"9121a75ac20b904f076ad610b3fe478ac891088181f4429cfec5283df1b98e7664619c","first_seen":"2026-02-20T16:30:44.592745Z","last_seen":"2026-02-20T17:48:58.732236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"betoffice-giris2026adresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}