{"report_id":"0c17458b-51fd-4043-96fc-dad1f32a638b","version":0,"status":"done","tags":[],"date":"2026-09-17T18:56:29Z","url":{"schema":"http","addr":"sedamatbaasi.com/","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":0,"asn":219450,"as":"Voyar Verimerkezi Teknolojileri Ltd. Sti","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"sedamatbaasi.com/","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"title":"Seda Matbaa | Kayseri Matbaalar","dom":{"size":12069,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"05760ba1ece4ed10d58e98e16fadd9bc","sha1":"82b56968d394a83743286ea09d0a25e1d8799838","sha256":"f3e416a1674d1b09b6f195234c006092fded6dbe55a88202fca4443bf648a560","sha512":"5b201e96dcb2d5f4076f2c295bf4299409d75981689b794750b266ecefd05d21ddc8db6378daa61030fd03a60278004278bf3e257e86b16119bb7f3bb483f45a","ssdeep":"192:z8kOn5l9gr0QodInNu3lofdG3kjE8nX+VXpXBXjXBX/X5XFVlMlM:zUKr0QodInNu3lcdGUjE8nkN1b1/9xYM","tlshash":"8842530548f1102f115a93d99af17f2aaee3c51bd60aa82171bd0b6d6fc7ec3c80796d","dom_hash":"domhash44eb6733b60946c02f16b6c46bcf4584","first_seen":"2026-09-17T18:49:41.941567Z","last_seen":"2026-09-17T18:56:30.538022Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sedamatbaasi.com/","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":0,"asn":219450,"as":"Voyar Verimerkezi Teknolojileri Ltd. Sti","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T18:56:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sedamatbaasi.com","ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"domain_registered":"2010-08-16","domain_rank":0,"first_seen":"2026-09-17T18:49:37.502331Z","last_seen":"2026-09-17T18:49:37.502331Z","alert_count":72,"request_count":24,"received_data":539511,"sent_data":12609,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}]},{"fqdn":"static.whatshelp.io","ip":{"addr":"104.21.24.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-08-14","domain_rank":869053,"first_seen":"2017-01-29T14:14:45Z","last_seen":"2026-09-13T12:10:57.243254Z","alert_count":0,"request_count":1,"received_data":635,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sedamatbaasi.com/","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"f21fd3f4dc91867711ebe0e9dbd65419","sha1":"c0bf4731c6edd9e4ec4ea772582dadba67a4149d","sha256":"faf71a31cd5b5682475de79a9bfefd3df09eba3c9e47f2f08ef1e593b46b2f62","sha512":"32412bb40e93efda09d7fc2052014ef38c68d08aa4a0ea3ec2794c5c41faec37c6ba5714fd565dcb5480e070219640e98dcfd3913283d3c1904299964782bce5","ssdeep":"","tlshash":"750115095c93553a1f0fb1b4713b621875b4420b9947f804fa4dd7c1af50f8d9857adc","size":795,"data":"","first_seen":"2026-09-17T18:49:41.975927Z","last_seen":"2026-09-17T18:56:30.587456Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/js/jquery.min.js","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-20T12:00:38.403907Z","times_seen":57251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sedamatbaasi.com/","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T18:55:59.714Z","timestamp":1789671359714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Thu, 17 Sep 2026 18:55:59 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"1u44p6o59b1rpp5a7rkopcau50","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=1u44p6o59b1rpp5a7rkopcau50; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}],"data":{"size":11934,"size_decoded":3210,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"a46b3e23325dc95a1d1a08e509b6dec1","sha1":"cabaaefb82acbb331626a59e74694c7b25ce6329","sha256":"e6925f400c223b2acffa014b424d3b15932e7094cfe793eaa08bdfb90064e054","sha512":"2dcecc73c536744452bb2cec653b7fa096fec6491398afe85a7ca356debcbe629fd392c0d23db39b9c671612a3712a9d77ec095e2872e130d7882c6f0136f4d6","ssdeep":"192:/8jOn5l9AOrTdInNu3lofdG3kjE8nXeVXiXOXIXmXiAXYXSVlIl8:/FiOrTdInNu3lcdGUjE8nE8Q2Yiemi08","tlshash":"ec32430548f1102b125793d99bf1bf2aaee3c51bd71aa82171bc0b6e6fc7e82c80755d","first_seen":"2026-09-17T18:49:41.961158Z","last_seen":"2026-09-17T18:56:30.541061Z","times_seen":2,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":5,"connect":72,"send":0,"wait":92,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/owl/owl.theme.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.181Z","timestamp":1789671360181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/owl/owl.theme.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:03 GMT\r\netag: \"75c-55c469bb-d938d34f386c0c47;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 612\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1884,"size_decoded":973,"mime_type":"text/css","magic":"ASCII text","md5":"c006557ed072fd3c401fa21d6a83c2f0","sha1":"9db6456bb22f8a231bba0f95fdbff97458c68161","sha256":"c7622199e67f3c00cd3bfca27c055e0167b713e4b0cd9214d71b6daeff144c04","sha512":"b9a11b44730d15230b1e0a8dfad6c7b93ddef5be692a6190965f5f89ca4e4e0ef53189688730c72bf6e61d741ebc92e38bbd661200baa92602054901e47f0d35","ssdeep":"","tlshash":"d041efd9d614121d2427856cbe6c8b871b0f6033a7090dfdf4af79b8e28a490717bb59","first_seen":"2025-10-24T06:54:09.706272Z","last_seen":"2026-09-17T18:56:30.542026Z","times_seen":5,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/theme/zel.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.190Z","timestamp":1789671360190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/theme/zel.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:03 GMT\r\netag: \"c857-55c469bb-b7beeb3f70bb32f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7622\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51287,"size_decoded":7984,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (51282), with no line terminators","md5":"fea9bf3bd58a48937b3c2bcc59535f7d","sha1":"fc3fdf6a46ad32caead736e160b97fb439662dfa","sha256":"00e3574b855c5960df3876f62ea1fa85747ce182fce4d84706c156ce5bd580c1","sha512":"02608c98849665b1783133ff42afa644d28baa8d823cbc850be2ae7bc4e5dcb6e0dc88bd2674019c3b896c8b15bf748dab98af69a758ad73286b0ffe9679e2a8","ssdeep":"1536:MEo6MmHlMvbZIvbZI95HiEycoCceFhq5j+U6UcH6MmD6Mm4oX5:Py65j+U6UnoX5","tlshash":"6533ee319506606df133c7a6a2c6a2dc293cc557fb335e2eebaa75a2c6530d60433bc5","first_seen":"2026-09-17T18:49:41.959922Z","last_seen":"2026-09-17T18:56:30.542737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/js/selectboxit/jquery.selectBoxIt.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.192Z","timestamp":1789671360192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /js/selectboxit/jquery.selectBoxIt.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:06 GMT\r\netag: \"1b7a-55c469be-fbcf5d3d480569cd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1665\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7034,"size_decoded":2028,"mime_type":"text/css","magic":"ASCII text","md5":"a8722a406ccd2bcdda4ec772a9890483","sha1":"96c9250af9d7ec9e62e12e88687df86706d09ba8","sha256":"c0eefc98d5de7da0670b25c6f860bf218a27aaf8f2509dd24279015cb9840170","sha512":"e005380029f4132feefb8bc9944670a1c4adef3a719e00ab6f39970198e143a4d8575ac1761b0c80cc26118dfbbdd25138292314ac786db99597233675c86448","ssdeep":"96:z9/JhzIREWFi2z73+eoLnzIejkpJs9VWhjIzNpUpuIi:RBhz6Fi23fcziIDui","tlshash":"fee134d039c0512078bfd59bac60d74fa37ec6e8d916cc392e55a26ceac56d8803325b","first_seen":"2025-10-24T06:54:09.695032Z","last_seen":"2026-09-17T18:56:30.543592Z","times_seen":5,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/bootstrapValidator.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.193Z","timestamp":1789671360193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/bootstrapValidator.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:17:54 GMT\r\netag: \"2bc-55c469b2-75ca261aca0c2f37;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 336\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":700,"size_decoded":697,"mime_type":"text/css","magic":"ASCII text","md5":"8a2cf9dee0eaf3f687e65df76c259105","sha1":"0dd1d16b1f17ab8fcf800f4f7bdf6620b39cdc98","sha256":"fce4a294a6edd6f243606d801e5d161f6da8b014669c580fed7e79bb5b3c85e9","sha512":"6acc7fc9b00e0dd5c5c3125d107c5d765557d635da75ecca98abbcf58be87558375505842808b7d327787f7afc577a658ddc800b213b2090b2ea6acab833978d","ssdeep":"","tlshash":"bc01444013210602a886c2487cdfe642b3592142d68e5869fe4ec5109fc80b3f377bd8","first_seen":"2023-08-09T12:32:09Z","last_seen":"2026-09-17T18:56:30.544515Z","times_seen":45,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/uploads/language/5424d919717a59101200003e.png","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.216Z","timestamp":1789671360216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /uploads/language/5424d919717a59101200003e.png HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 07 Aug 2015 08:18:13 GMT\r\netag: \"4706-55c469c5-c790f3b5ace2483c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 18182\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18182,"size_decoded":18509,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"8453eff505a1c7f20f461b3f5abe6644","sha1":"fe65113d4bb75b89408be5214dad501625e6a616","sha256":"a4648b7f5e5d9861e803c064683830c6917fdb35c16863e57b6722b458f51e67","sha512":"8d3fa0ce0fdac35bb7308db9929c06af6fc7687dd19a4cb48bbea6fe263632b9d588d716a6ec1606369f45a0616f554e8242edcaccc6680b3b141a3ad843b024","ssdeep":"96:bSDZ/I09Da01l+gmkyTt6Hk8nTA3kEWRQZY9xNXrNXuGsc5MPEzgxh8XFRXiFvD4:bSDS0tKg9E05TA3ktQ65ARQgQ1gvD2N","tlshash":"8b825c6dfcf07064b9c9ab301dc520099d261687c9c09d48b6cc8cda6f14fea9d5f0a7","first_seen":"2026-09-17T18:49:41.944468Z","last_seen":"2026-09-17T18:56:30.545272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/theme/forms.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.331Z","timestamp":1789671360331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/theme/forms.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/css/theme/v4.css\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:03 GMT\r\netag: \"1dc0-55c469bb-9d507575efc768f3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1521\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7616,"size_decoded":1884,"mime_type":"text/css","magic":"ASCII text, with very long lines (7616), with no line terminators","md5":"24e5de27900cd4d8338f60212ac61747","sha1":"a014a3d8a992d823633f0fd4551cfa200abd473e","sha256":"8945ff2d8a07c2958ee9f31787e95987b56928d99a2b8f31abac7006c0d9c4b1","sha512":"85d5da38ae1d602eda2b7abcde0b86eb417b5e1744221cec3c289972110f2955bbd6fd41bb4776b5733d51a06a5e9d854e18aa2b67342d02324c22e0ba11abae","ssdeep":"96:psfi+LMEdIW4Qw/AIbJt0On1QJK6LtbsxWnnuKPj:m2r1t0/LtbnuK7","tlshash":"3af11260bec80234787fdbada8d0ebcf657c81a6d8254a6c7e527a16c5c24d417b360f","first_seen":"2025-10-24T06:54:09.663733Z","last_seen":"2026-09-17T18:56:30.546181Z","times_seen":5,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/images/default/grad.png","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.619Z","timestamp":1789671360619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /images/default/grad.png HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/css/theme/v4.css\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 07 Aug 2015 08:18:04 GMT\r\netag: \"862-55c469bc-ee20e5fba573ee2a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2146\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2146,"size_decoded":2471,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"9d23c982829a5cad3502e2ab6e2924e2","sha1":"6a5cf19849173411d985d0f1c8f27bfe4d8f5503","sha256":"65807a0d50159cfe79bf5abf430b1a612de8d6c42a47fa57fd375bab9dd139ba","sha512":"883f44ff093aa84fefcb3ef122e4e5452f56b309e500413c107de4a0235353a441d2267d0fdc7f482e839c5764edceed8e3d14becddf349ebfd450e936384ce4","ssdeep":"","tlshash":"ed41b449bf203740f1dc2c8321f6417eae524c40c9c07ba1ad8ec4a90a580b9a8a6bde","first_seen":"2024-10-16T17:58:45.274898Z","last_seen":"2026-09-17T18:56:30.547332Z","times_seen":15,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/owl/owl.carousel.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.183Z","timestamp":1789671360183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/owl/owl.carousel.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:03 GMT\r\netag: \"5d1-55c469bb-f95c3e7d6bb48eeb;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 471\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1489,"size_decoded":832,"mime_type":"text/css","magic":"ASCII text","md5":"ebcf028a37c764a412f0565f34f02442","sha1":"9bb8ff9f5c6ac77b90a314e1aa73d259c79e6432","sha256":"a6f93c19bd3289ac18acb538f0fc59f89c4812c7c0557bd1a2dcfbe8c8d7d722","sha512":"c27be69d399cbb198aa1deaf67cbf29299977e13f7e88b785cd47fa3b0f2ad24a428681157b1d2ff6e674fab31e59fc356bcb2e731f5dfd78b7d1df1b83e10c3","ssdeep":"","tlshash":"f4315bf011342589652bc79e4acfa7181a3ee1129d025d4f765f1e0e47cee4e611fb4b","first_seen":"2025-10-24T06:54:09.654565Z","last_seen":"2026-09-17T18:56:30.54832Z","times_seen":5,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/rs-plugin/css/settings.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.184Z","timestamp":1789671360184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /rs-plugin/css/settings.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:12 GMT\r\netag: \"8f9a-55c469c4-6192b039fb8b931e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5120\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36762,"size_decoded":5483,"mime_type":"text/css","magic":"ASCII text, with very long lines (36759), with no line terminators","md5":"84565a9d718aecf3825c37c5a44fe2df","sha1":"a54b68d1ec729b00072ef04c09f709e9bfec7cd7","sha256":"70e601640b1f9f553115fb3e27386fc23ac4a782619bdae524902293b95bb5a7","sha512":"2d7ad2a12dcf0fbe4b0748528cab061b5f6e0efefc8bb8adda0d2781acc9edb1d46c26a11cab974142ad44d938ae863320ed3871b4a99870cd47b8621739b951","ssdeep":"384:n/BXuUQCRC3TkzEwhrYr3Wm9hNDUX56cfwDDBSReTdp/mm8rPOC04E7Zfas1CZOr:n/BwCZf4Jf6kxUhmkrActSXkGhpz","tlshash":"0ef2567592e160a9f227c726a6c09afd603de113bf230e9ff10739add3936890476749","first_seen":"2025-10-24T06:54:09.672526Z","last_seen":"2026-09-17T18:56:30.549192Z","times_seen":5,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/minimal/blue.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.195Z","timestamp":1789671360195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/minimal/blue.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:02 GMT\r\netag: \"5dc-55c469ba-391af2115a3f88f5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 361\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1500,"size_decoded":722,"mime_type":"text/css","magic":"ASCII text","md5":"fcb9b38d9e0517ae598021c6859b64df","sha1":"097501e9534d6d151700bce0801c72fb4f3ba68a","sha256":"ec8feb2055380cfe9f799581692b1ddede005f1b9f2cc36b4b0e92bf8dd2b3dc","sha512":"8efee5d2ebf914f6d3d384973142052d63c6071c3d647fc8f10aefaad28b771699ffe367ed81ed6a99b1c0136ce6cb6f12a59daef86561255d96974c12aeb527","ssdeep":"","tlshash":"2e3128198e932a493e9fd22016ab2212e7359003dd55cfbd396e7868cf879d000afe74","first_seen":"2024-08-20T09:15:18.109311Z","last_seen":"2026-09-17T18:56:30.54998Z","times_seen":12,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/images/logo_2.png","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.218Z","timestamp":1789671360218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /images/logo_2.png HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Feb 2019 11:05:53 GMT\r\netag: \"62e1-5c5eb411-ec5d14c4e0b6cd45;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 25313\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25313,"size_decoded":25640,"mime_type":"image/png","magic":"PNG image data, 307 x 101, 8-bit/color RGBA, non-interlaced","md5":"c33bbb3a29afcaef846003c5bd82242c","sha1":"87520b9b3117222fcc94eadf4f934347e31a06f3","sha256":"16b0d327ce1b45d3ebaeef94eac2573d985e277aa77848582e09b9b41055965f","sha512":"dbad037058e92b64f3f8e6e54f1079748e6d192eb2131f2b1769166b0c8336308582abba782d07733f3301945526152e9ec8afaec73574dbeecf70ab354044c2","ssdeep":"384:+0B9p+slZKpKcFVvCEHVmoK506jEAwAtsmoJMzG6jTAOBh7:+Wp1zfcF0gmoK5pgTkzpfxBh7","tlshash":"f5b2e04ed727adf1146904cd5398c520dd39b3ec210c11d2a4e4b53ede9aeca48faa97","first_seen":"2026-09-17T18:49:41.946337Z","last_seen":"2026-09-17T18:56:30.550768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/fonts/fontawesome-webfont.woff","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.618Z","timestamp":1789671360618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/fonts/fontawesome-webfont.woff HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/css/font-awesome.min.css\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/x-font-woff\r\nlast-modified: Fri, 07 Aug 2015 08:18:01 GMT\r\netag: \"ffac-55c469b9-1f2b4919d173e03a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 65452\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65452,"size_decoded":65714,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 65452, version 1.0","md5":"d95d6f5d5ab7cfefd09651800b69bd54","sha1":"7d65e0227d0d7cdc1718119cd2a7dce0638f151c","sha256":"199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1","sha512":"e96012d2fcd5df03c2f7385c9ee2a2932b3909659d59e32bf3155e102eaf9eb7b4b00c5806c892ace1b8f4bdb58630fb20868ad368c771bd8d2aad7749b7a399","ssdeep":"1536:WhdmBOT/dMBXSeRkzJBJlLsZrzhWaSU82n:WLmBs/dMduJBJl2nQan","tlshash":"4f53023b2a717a74b8f5cda4af04f33229dbfe99f8840472d52a1b5a84671185b04b19","first_seen":"2023-04-06T01:39:02Z","last_seen":"2026-09-20T14:46:18.911011Z","times_seen":14740,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/favicon.ico","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.825Z","timestamp":1789671360825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-20T16:40:32.001349Z","times_seen":155856,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/bootstrap.min.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.167Z","timestamp":1789671360167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:17:54 GMT\r\netag: \"1ab5b-55c469b2-bc6bbb428cdbf2c3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 16808\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":109403,"size_decoded":17351,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"1ad34cd2ba163c59d06cfbd93efe58ea","sha1":"faab76db0f4f7d1bc075d6266bad76e091bacb22","sha256":"4d9423e961f26109ceb512726c33001a46455967903912df65946f6899fc21c8","sha512":"edce679dfd4ac3b6d70bf74b2e1482d9d2221371796f9d1d1c239abcb79265f0d8c447b23b98f6fbdecb61d9ee866f3cabb96bc681519069fb62aeb704309cc8","ssdeep":"768:ZAGxwzkBUmlpztzuRdvGN6eABkdIUIbZbnbJN8gwaKNhLNtqNhkRQmNae:Xw4dERdvGNIkabbRkNchs","tlshash":"89b3d7a0f11031ea7223c55a71d0ed872619a053e66b4fb7f22f25d88f895ca1773f1a","first_seen":"2025-10-24T06:54:09.676645Z","last_seen":"2026-09-17T18:56:30.56684Z","times_seen":5,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/animate.min.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.169Z","timestamp":1789671360169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:17:54 GMT\r\netag: \"17f9-55c469b2-bbc123a31f38d290;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 731\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6137,"size_decoded":1093,"mime_type":"text/css","magic":"ASCII text, with very long lines (6137), with no line terminators","md5":"53b9ced6094cb553f509156dfd151d04","sha1":"69ec59d28db761cd81a056e6e87831d0810e3df7","sha256":"344499c9b4106a10f1fab1e47d71e14599a7776f5fd32b66f5c93a54527dc7d7","sha512":"6c5f0b75d845a1aaef8e07c8184e70e5ca78a084ad8214ef3cc6381efae9ef37ab434f11a855f4694d7a9fa1964a0d2fcc269f13790739830c097d4cbfb1cca8","ssdeep":"96:wjXq4Pn4z49fai48j4LePfb34GM+9+Ib3uxp/FG1b6jqmccx/:wj64Pn4z434+4LePfb34GM+9+Ib3uxp5","tlshash":"8ec1f3de86d55700c2674ae26a8dea508e748de379711cefb1a81c0ec701b98739b53b","first_seen":"2025-10-24T06:54:09.705108Z","last_seen":"2026-09-17T18:56:30.567739Z","times_seen":5,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/colortip-1.0-jquery.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.175Z","timestamp":1789671360175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/colortip-1.0-jquery.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:17:55 GMT\r\netag: \"810-55c469b3-8fbecabe76bbfc44;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 639\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2064,"size_decoded":1000,"mime_type":"text/css","magic":"ASCII text","md5":"e3b9dd3a8b74abddb6cc4d2ea2a1f360","sha1":"4200c6c967ec233c8be06c6595b898507e11d5a3","sha256":"896ca520df83c6ab13b8a419265e3b9bff887be4ea9acf088fda1c729e0ac48a","sha512":"1c9185946747ff8c8fa92ac8aa67642b134b6cbbb734d18109f0c5bf6a29ab84b3b25d3b6163e4746e5b6964e7d046ed4fb545d017213a198725c403d64f9d8a","ssdeep":"","tlshash":"bb419af6f9060226761fd21cb064fa86646e1186ec1f4f28bef3796c91542c03c63a28","first_seen":"2025-10-24T06:54:09.719056Z","last_seen":"2026-09-17T18:56:30.568837Z","times_seen":6,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/theme/v4.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.186Z","timestamp":1789671360186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/theme/v4.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:03 GMT\r\netag: \"9e24-55c469bb-1def36acc20b9027;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6900\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40484,"size_decoded":7263,"mime_type":"text/css","magic":"ASCII text, with very long lines (40339), with CRLF line terminators","md5":"43a2d5ce9af40b856d9a2ed8346e65b7","sha1":"e27452397fecf397956f39d3746eb9b2627549ac","sha256":"d20600358f1efdbfa42f34da0b9489cf1a17a412591bf92a2f7c5a67d2d279a3","sha512":"d474fdb5353b40db12eb609b9400f0d4f3d8b83046398faaaf026a7ddd54df311be264dd75a41922a5d295778a4b6a57b01f1559dc1b393429df3437865b67a5","ssdeep":"384:3xxToCcVS0vFn1Jv6HLH7TcxToCcSMRpzxg9FMwfQo4Q/5QcwlL+:3joCcV/vFiLH7woCchpgXM2QvQRFwlL+","tlshash":"0f032e329656216cf133d366b6c2a69c2538c553fb330e2ebb5a7676c6830e65433bc4","first_seen":"2026-09-17T18:49:41.967658Z","last_seen":"2026-09-17T18:56:30.577424Z","times_seen":2,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/anasayfa.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.188Z","timestamp":1789671360188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/anasayfa.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:17:54 GMT\r\netag: \"2a97-55c469b2-791edf418a4f126a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1300\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10903,"size_decoded":1663,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"87b06976cfb970de671255d28539bf9f","sha1":"a9ea98dc3a45634b2b532b40a8901d8e1d404411","sha256":"5b8db48c34b3ea673b13a4bf3e8cd4b905f674590d96fe254fcdcd2b36e3de3b","sha512":"64c312d55fc6b4746003eb15a1c5afd58c71d8140f75cd414682925c9214df68f6a59d6dedb779f668ce362d2e37178800a7248292df975197026c00c514ed15","ssdeep":"96:nlv1QnkpFdSSGSE0GTDADtapo17fB8sqglDsDgM:lNWkcSH8+so8sqgVsL","tlshash":"6622079bd76a08eb79b3b3b8e273ce19ebb71067c1068b693d6c151a0f78044d851f48","first_seen":"2026-09-17T18:49:41.974613Z","last_seen":"2026-09-17T18:56:30.579274Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/js/jquery.min.js","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.200Z","timestamp":1789671360200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Aug 2015 08:17:57 GMT\r\netag: \"1762a-55c469b5-1d8746e2f1ca415b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 32294\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95786,"size_decoded":32673,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-20T12:00:38.403907Z","times_seen":57251,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/font-awesome.min.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.170Z","timestamp":1789671360170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:17:55 GMT\r\netag: \"55a1-55c469b3-cf63bc5f0eed42b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4731\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21921,"size_decoded":5093,"mime_type":"text/css","magic":"ASCII text, with very long lines (21756)","md5":"61eb1a9c6080bb428845aa176d77606f","sha1":"b60fff569dbb308acc07387ca5a02db81cee333a","sha256":"e2eb1ddf5d4ee4afb216de03898659a3f756623a7e5f04769cd61bc6c1a1d223","sha512":"6807335cba833982a4dc7735d52605dc8fff5b23723c9b1e64be8be3416a8bbe72f504e10abcdd8ea56eb2f180b271f0c8d7e2d54aa1e6e77da1a891287b7fcc","ssdeep":"192:sq9N/8W+ab2edrKeTUKIErArKlcZJVrJ3ee+cR6waWm215bvfwf5DrkHUa2:rk5yWeTUK1+KlkJ5de2UWmyTfwYUa2","tlshash":"e7a241f8e54c01d66731c48bff95b36862baf33dd5804d99f11f290c29d22a912c5faa","first_seen":"2025-10-24T06:54:09.696367Z","last_seen":"2026-09-17T18:56:30.581535Z","times_seen":5,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/jpreloader.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.177Z","timestamp":1789671360177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/jpreloader.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:17:55 GMT\r\netag: \"901-55c469b3-706ad9f558d93804;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 611\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2305,"size_decoded":972,"mime_type":"text/css","magic":"ASCII text","md5":"c8e874ce977a9f4c99fcbb05959cb0a7","sha1":"241ddcd06eff1884e1a1676ffd9f901ae3eca523","sha256":"5c2647674fc514f46e64b1209c8d86e77deb2cf4390fdba9376af17fbb33895b","sha512":"71727a718405370b3635bc4b756ea7724fdbf2992ed85bd16cffb8832101c1b6144c173e639220b58ab14e29ca3fed2c962a6d103dd917b63fd52d8207540605","ssdeep":"","tlshash":"9d41cd36e492294af127d46873282b88a32e6c93d51f8f2db4df39bcd3815d05433aa5","first_seen":"2025-10-24T06:54:09.700206Z","last_seen":"2026-09-17T18:56:30.582788Z","times_seen":5,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/magnific-popup.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.180Z","timestamp":1789671360180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/magnific-popup.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:17:55 GMT\r\netag: \"173d-55c469b3-4bdcd8a5abe90b17;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1505\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5949,"size_decoded":1868,"mime_type":"text/css","magic":"ASCII text, with very long lines (5949), with no line terminators","md5":"edb93b33563eecfe07eab6576cf3a4d2","sha1":"0ffd56192755b24f2d2a9287bc536f757cbded07","sha256":"82155925aaecfc6eec9248a9c69bbb6e8d8163e7d4ad8be2006f7663f73680df","sha512":"21adb2f7f21e52d1318e051302a4e99b8899d37d2e8f3d4164d7d95a5582e40d9ce45c3194d52340e6484cc9cc2542a30925a9a4d7a453283a30df48b3cb32b3","ssdeep":"96:MZUcKSCO7EWP9U80ajZ/XHp9t9M3sBUcXD+PMk97UcCWhxTWw:MxCO7EWP9UzajZ/Xp97yMk9WWhr","tlshash":"d0c144b36a51317ad632c916e1c39b9c3223a233f66346dfdf869518c6cf4dc1655388","first_seen":"2025-10-24T06:54:09.665689Z","last_seen":"2026-09-17T18:56:30.583995Z","times_seen":5,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sedamatbaasi.com/css/theme/responsive.css","fqdn":"sedamatbaasi.com","domain":"sedamatbaasi.com","tld":"com"},"ip":{"addr":"5.180.185.136","port":443,"asn":203576,"as":"Onur Ekren","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.333Z","timestamp":1789671360333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedamatbaasi.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 23:00:08 GMT","end":"Sat, 17 Oct 2026 23:00:07 GMT"},"fingerprint":{"sha1":"1A:AF:C3:75:5B:31:4E:74:13:51:32:02:C9:38:99:3B:54:A9:D4:18","sha256":"5F:B0:91:1B:B0:9B:72:18:F8:62:2F:9E:25:90:33:F0:A4:C8:E0:E2:65:B9:52:57:0C:CD:3A:32:80:DC:3D:6D"}}},"request":{"raw":"GET /css/theme/responsive.css HTTP/1.1\r\nHost: sedamatbaasi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/css/theme/v4.css\r\nCookie: PHPSESSID=1u44p6o59b1rpp5a7rkopcau50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:56:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2015 08:18:03 GMT\r\netag: \"cbd-55c469bb-47391e4a20c97865;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 733\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3261,"size_decoded":1094,"mime_type":"text/css","magic":"ASCII text, with very long lines (3261), with no line terminators","md5":"e27701b890ef5fbb942ef317dac2b3a5","sha1":"147f76e3f3ff75e7a0985ae5203849290d25c051","sha256":"713025a3ceb2ca5a0a812e74bda2490111b4e22e7350274ff189cb43c7a2c729","sha512":"7df2219b7efae936eee939befc18cbfc91f31e795f4d633f99ff696e6d61acc1ec92400f90f29383bfd1acaf83792f87d32b390246cd666039f17f3ed3fdd59b","ssdeep":"","tlshash":"0461add3fec1201930168442d84777bcbf3eaa50a325aaf2e905bb3547885f71461b9e","first_seen":"2025-12-01T20:23:52.031754Z","last_seen":"2026-09-17T18:56:30.585201Z","times_seen":4,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sedamatbaasi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sedamatbaasi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.whatshelp.io/widget-send-button/js/init.js","fqdn":"static.whatshelp.io","domain":"whatshelp.io","tld":"io"},"ip":{"addr":"104.21.24.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sedamatbaasi.com/","date":"2026-09-17T18:56:00.613Z","timestamp":1789671360613,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.whatshelp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sedamatbaasi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=us-ascii\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 18:56:00 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5W8kJnNsAd8WL7A%2Bz39JcukZfr%2Fs7JL9GqX053Lux0KXZBdMNhwcGlMvUYltU%2FTkAgagcpdvNghGfo%2BBG1VrKT%2F5onYPCZT%2Bue%2FRFkR3fLZ6oDMwwXYhqX2QABc5%2BAgGfVFqRqe\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3ca5413f868c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=us-ascii","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T17:41:56.000748Z","times_seen":18571932,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}