{"report_id":"1e4d1abc-8c52-4a47-948e-6d72654d89ca","version":6,"status":"done","tags":[],"date":"2026-01-02T07:06:58Z","url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":0,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"title":"homeyazilim.net/excelprotest/excelprotest/","dom":{"size":8047,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"240668d8280fa70536eb96bea2ca9db5","sha1":"35c6e63149b1484f599462a665777b23d950785b","sha256":"20d718b68a08e1c350f724a2ec111e3b28a75f73ce269ddea87d030525793ff7","sha512":"10449cc77798c726fbe91d878ea754fee69afb9a1911c21b9cdf637b2f60b67def6c5c798ce2dd56a1149df65ede22eb8b930e18b46bb5a133e85784c444095f","ssdeep":"96:ISUPXYZXilrh5St9bWoqFSixUNKOE3H0CJWp:ISUPYxorW/ioqEwUNnEXrJWp","tlshash":"32f12015c8fa2433115240b0b5e56e1bafa4d907c62e8e2476fc4d997fc7e1ace632c9","dom_hash":"domhash700bdb11f268ff38f8b31b507a42a61e","first_seen":"2026-01-02T07:07:01.396666Z","last_seen":"2026-01-02T07:07:01.396666Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":0,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T07:06:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"homeyazilim.net","ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"2020-08-29","domain_rank":6604890,"first_seen":"2026-01-01T13:11:12.595804Z","last_seen":"2026-01-01T13:11:12.595804Z","alert_count":28,"request_count":14,"received_data":851259,"sent_data":7532,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e34b9df6a22a17925619658256352a14","sha1":"d47f8c5d15deba1e70a23de0890d714ad9d24e60","sha256":"461e7e317a551bd857b9cb4a11e203709a93cbed3900e085ac1f89debeb51467","sha512":"4114785d030a91eb07aa6e02f83d2eafa9dd4335eb1e5ab7649b96be5d37d34f20249bdbf354b6ebf273a8aa8784619fcea3a2d780d0d7f30becc05626d521b2","ssdeep":"","tlshash":"18f0be96a82b0ad23eb300152e7bd154bbe420670915ce79396da8d81f4c612b93e2e4","size":568,"data":"","first_seen":"2023-03-10T02:34:44Z","last_seen":"2026-01-02T07:07:01.413205Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"02266035dd6a79088d33941ef9737c33","sha1":"cee54ccb8d706c7558f66ec91924774d52a27232","sha256":"5222e8b9ccaf0771a60c6c78d73ebb48da0d8b6c1f26dd552a8181ad36f41a62","sha512":"3ec3e90afba575f57e160e3b54b7b11e496d13ebe05dab2a13141902d5e1ff4b2131345b1bff91cf9cd7223477851dc450cc01ed36b93e2e7d1ee2d3f285f797","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPm+:ygZm0H5HO5+gCKWZyPmHQ47GKiTDh","tlshash":"909309dd72c6706257b761ba00af540bf236599e6c4d4410f124e8eabc78a4e823bf7d","size":91145,"data":"","first_seen":"2026-01-02T07:07:01.404397Z","last_seen":"2026-01-02T07:07:01.404397Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/js/tether.js","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ca4f6a2125f234c81e1a7173beedf7","sha1":"5048b81628f7fe46e2a05cb0ffeb360bf68df9b2","sha256":"3187f6a95f617ce9b1d91ad2e5889a22dd4b5566bfe278a66d93bb6019dac3fe","sha512":"aa86d2e3b233f0b1c75465494b4e43f9d1541b5ee4b58ebffd950835fbf2388d00dfe40fa43c8c5d4cb6c7cf876aecbc63a6a81e74d9fb0f4393826626b89864","ssdeep":"768:1Jc67wdFbgDo6h+T7zMczQvoK/ww8l31g9CZQ5nAg40bKD8i5:zn74bsopz+AK/wM5AF02Dh","tlshash":"d9c2d6a8735170b2429b62b3907f830a7132d17463879054b63cc9f59db8d4e62abf7e","size":27989,"data":"","first_seen":"2026-01-02T07:07:01.400659Z","last_seen":"2026-01-02T07:07:01.400659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/js/bootstrap.js","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b3583bf333b833d26aff3ec86989594","sha1":"da4286cdab68853cd62f25ea2cf9925a5b315847","sha256":"488e4ba42bd13664529f64f7da11a103c4c2d41249eb75ff48b3cefc06c2abe5","sha512":"668a7a4d10e455cae5d387497e12405d1afc93534becf17d0aff915a6d6e61ad8cd0ff8feb4c4d60f755af7ba7e0f90eb6aa01950e342b70cdce6684c61f60f9","ssdeep":"768:JVCgM5KXrrcsU0n3fEHVAqcy6jOD0Ydkg+/ONU65Z+o+fSNx7eXs/ZWSMEMGLleN:JVjMyrcsU0nvRJOhzGqNxi8/86W02Dh","tlshash":"fe23b509725074a2079fa475527b050bb33b285ea60a94acf999d8fd2dbcd4c7327f38","size":49653,"data":"","first_seen":"2026-01-02T07:07:01.41005Z","last_seen":"2026-01-02T07:07:01.41005Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/js/scripts.js","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"166c2e82738bea2d01bdfd90492fd9ae","sha1":"7d3072490c154bcb99f5cb66ee3f2229f2f471a7","sha256":"8bc07977799c3ec14247dd42709bda6eb3a6a31f17e4d0c36ca7ab6923f86cac","sha512":"06d1a7a3c7e036439faef92ef3ac4af64f6e28b1125f14331b37212f46b4586f01a2d70f282285de665db80576710c2be78f612505c1a634c48f7f726eae8836","ssdeep":"192:cpE+I+WpxJaObdCbHt0bKI0HG651ISHkHL+:EE+4VY0bKD8iS+","tlshash":"91d1a55935da21b2273360772b8f808276b6c0670505db043a1cde9c2f6cd2de7ae7e8","size":6540,"data":"","first_seen":"2026-01-02T07:07:01.401823Z","last_seen":"2026-01-02T07:07:01.401823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T07:06:35.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/ HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":8327,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"64378dfde9f29eb83ff4bd215249750e","sha1":"af576d83ebfbacd305661a4109f1c6aaf08ee140","sha256":"81317b8327e9388ec1ff62babe7ef8fe3df3bffe9fca3802e248066577ca6686","sha512":"e0ddd6ef58430db2f2b080b18388686249e96a532ab276c8292c0450b3271c10d20cfbed338f1dbfb591e164b0a74f566f97ba60ba075f382d79f21007882db0","ssdeep":"96:DMXa4KlNY5eLtJLuoxKqZsPCEoNApPCkk9sQMn:D4aLNPLbqoxKqCPCEoNEPCkysQMn","tlshash":"af020f1948d6143312728290b9a16f5affa08507d31b8e6476fc5b9f3ff6d15cd63288","first_seen":"2026-01-02T07:07:01.398218Z","last_seen":"2026-01-02T07:07:01.398218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":294,"dns":159,"connect":62,"send":0,"wait":95,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/css/twostyles.css","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/css/twostyles.css HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2020 04:30:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 965\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2790,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"13f56cbc04ad150cf1d60f87239037de","sha1":"aab900070c82e628b575ce3a82822d75b17aeeb5","sha256":"cfaf795ad3e118246c9aedabc060a95eeaec94110466e458288cdca42df45327","sha512":"1ecb0d5983d1640d8f76d962dd4b98c2ceb6421b9ee61cd717494cbdf62badc841d9652a991d5f8cad1e75803bbb2be188d9400a1629ee3a98ea451b4803366a","ssdeep":"","tlshash":"4751df19aef3354b3403d03c679e9942e325814bb209cf6f3eacb164cf44355a9aeb44","first_seen":"2023-06-09T02:16:28Z","last_seen":"2026-01-02T07:07:01.399422Z","times_seen":5,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/js/tether.js","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/js/tether.js HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2020 04:43:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8844\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27989), with no line terminators","md5":"33ca4f6a2125f234c81e1a7173beedf7","sha1":"5048b81628f7fe46e2a05cb0ffeb360bf68df9b2","sha256":"3187f6a95f617ce9b1d91ad2e5889a22dd4b5566bfe278a66d93bb6019dac3fe","sha512":"aa86d2e3b233f0b1c75465494b4e43f9d1541b5ee4b58ebffd950835fbf2388d00dfe40fa43c8c5d4cb6c7cf876aecbc63a6a81e74d9fb0f4393826626b89864","ssdeep":"768:1Jc67wdFbgDo6h+T7zMczQvoK/ww8l31g9CZQ5nAg40bKD8i5:zn74bsopz+AK/wM5AF02Dh","tlshash":"d9c2d6a8735170b2429b62b3907f830a7132d17463879054b63cc9f59db8d4e62abf7e","first_seen":"2026-01-02T07:07:01.400659Z","last_seen":"2026-01-02T07:07:01.400659Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/js/scripts.js","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/js/scripts.js HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Mar 2022 14:34:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2826\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6540,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3004)","md5":"166c2e82738bea2d01bdfd90492fd9ae","sha1":"7d3072490c154bcb99f5cb66ee3f2229f2f471a7","sha256":"8bc07977799c3ec14247dd42709bda6eb3a6a31f17e4d0c36ca7ab6923f86cac","sha512":"06d1a7a3c7e036439faef92ef3ac4af64f6e28b1125f14331b37212f46b4586f01a2d70f282285de665db80576710c2be78f612505c1a634c48f7f726eae8836","ssdeep":"192:cpE+I+WpxJaObdCbHt0bKI0HG651ISHkHL+:EE+4VY0bKD8iS+","tlshash":"91d1a55935da21b2273360772b8f808276b6c0670505db043a1cde9c2f6cd2de7ae7e8","first_seen":"2026-01-02T07:07:01.401823Z","last_seen":"2026-01-02T07:07:01.401823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/images/logo.png","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:37.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/images/logo.png HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jul 2021 16:13:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58256\r\ndate: Fri, 02 Jan 2026 07:06:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 1964, 8-bit/color RGBA, non-interlaced","md5":"da7d3afa81ca3f0769fb85f58e55b47c","sha1":"1d02dd7bff8bebfa50f78b6c624256504212287f","sha256":"53e2e695462e89a66c56d328d8baec8151800be05b878370a38601e5438b3d82","sha512":"2754009763d398e6e1feba38546f76dd9ce8e31a8334771f86205c5a28b65902ec8143817dc31d3af9e3b284145fa467c7698b5be5df9dd6b86c9e6f8cdeeaae","ssdeep":"1536:HVSheQbS3JsnoeKOR1jQSb0OOoA5pgYs46uE6ntXTM06Ni5333333333TRG3J38:1SheQbyQRpb075pvRGs","tlshash":"55438d7ae4a12aa6c648c7f167274f11f6b1547a4130930a4772f2e96cfbb47fc8b109","first_seen":"2023-05-10T01:23:03Z","last_seen":"2026-08-12T08:55:50.490686Z","times_seen":139,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ndate: Fri, 02 Jan 2026 07:06:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":91145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"02266035dd6a79088d33941ef9737c33","sha1":"cee54ccb8d706c7558f66ec91924774d52a27232","sha256":"5222e8b9ccaf0771a60c6c78d73ebb48da0d8b6c1f26dd552a8181ad36f41a62","sha512":"3ec3e90afba575f57e160e3b54b7b11e496d13ebe05dab2a13141902d5e1ff4b2131345b1bff91cf9cd7223477851dc450cc01ed36b93e2e7d1ee2d3f285f797","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPm+:ygZm0H5HO5+gCKWZyPmHQ47GKiTDh","tlshash":"909309dd72c6706257b761ba00af540bf236599e6c4d4410f124e8eabc78a4e823bf7d","first_seen":"2026-01-02T07:07:01.404397Z","last_seen":"2026-01-02T07:07:01.404397Z","times_seen":1,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/images/spin.gif","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/images/spin.gif HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 22 Jul 2021 16:10:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9425\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9425,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 220 x 20","md5":"b7f090e9f3112f59bd9bb793f16184b7","sha1":"276c6bd5cc1424a461e308f794baa47e21594b99","sha256":"551a954e57ef0d33d46eb753aadc38bf198ace52094f7aee605f6c9a7742b257","sha512":"4601d8e20367267df677785872a795dba8ee556935539fccd23f64a8b57ed0fcf82ba7023eaa6e831e55c2a05c7a2af0ee65213a9e11f45b135b6ef718d718f7","ssdeep":"96:vlp6ZcrmsBFfe6nOMfwRXdD0QJoaVRaULV4zsZcZkK3h58VAJ+qLHOLvSTIvJO9F:LltfepscdYkbaaV4gAkekqy7RRy","tlshash":"96126574c6a4d10fd3e9d9f0aa17ae851776b1b1c90e2e873571f723a1b1b3230462e6","first_seen":"2023-06-05T17:07:35Z","last_seen":"2026-01-02T07:07:01.405506Z","times_seen":93,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/images/bgimg.png","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/images/bgimg.png HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jul 2021 15:47:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 320034\r\ndate: Fri, 02 Jan 2026 07:06:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":320034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1366 x 667, 8-bit/color RGBA, non-interlaced","md5":"3336a0db9df04c5d317c8f1478c0a5dc","sha1":"1f145bfb725bffbc373922dddc1e420a1d759586","sha256":"d23f6014f87de69d636aab22366b6fa620428f3fbbdedb3736005741be4c9e06","sha512":"d5155262e4be404ad841055a4233d1061d54502a55a40b4d94e528d9b597199c725984aa3a19b7e0af0f93ae0e4b3fa0ce2dd9474017de7b876a1a2f5c09ff50","ssdeep":"3072:WC4uorMyhDNZVHHAYL9alqNLze3xBJX8HPei08NwDN33CWOe/dHWLzOVG6SZ1epM:zxsHAYL9qqdiRMC8NwptOgdmeQK2P","tlshash":"f26412e5156dee0dde5fe0b919c4ba071073041f8af116b4b57ec94ecf12f2a4aa0b16","first_seen":"2023-06-09T02:16:28Z","last_seen":"2026-01-02T07:07:01.406916Z","times_seen":7,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/css/bootstrap.min.css","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/css/bootstrap.min.css HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2020 04:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18042\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":150996,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65317)","md5":"7e923ad223e9f33e54d22e50cf2bcce5","sha1":"8b7cb193d70bb476db06651c878dfcd1a7e1c0ee","sha256":"aebf611c1438dc7ec748e9a6364c734066b34bf2a1c7e2fc6511ed784635b50e","sha512":"f7652e7fd2a079d9e39f11d51ce7ea1b95c9dd10418ecd386242ff090d61f8094108b5aea462efa8bcca1441f9aee42cc8f16265deccc0e4d9b811718a73fba2","ssdeep":"1536:JGz3B97sTS2k+PwQDEBi8d/g+oomA+iiHML6YVA30UtEMH2UtI:JGP7iA+jML6YVA30UtEMH2UtI","tlshash":"c1e34fa7f5a1361dd053c9045691bbbd462fc456d3221ffbb4233b748b86ac70aa3a0d","first_seen":"2023-04-05T07:55:38Z","last_seen":"2026-08-13T18:39:43.423207Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/css/all.css","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/css/all.css HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2020 04:32:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10208\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49207,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49022)","md5":"6cb9f77ed25304945ce4363456ac3acd","sha1":"fae260ec8f07cb88ab432bf3afab2e25a69ae609","sha256":"d6dbd1ce65f8aeacced66db68bb0ae668004d326b8354b928961412f66106985","sha512":"3bb1464480956c45ebf0b0b4ba747a5a0aa530f4e30a9292f6ff85523e9d5eb29d47aadcb4a08409fa736c0b4447b9e278673117a0a87cd8b270f68283cec609","ssdeep":"768:bTa31Ezd2Q6tXU2Wf9kHt/CMzj3RCgwSxS8/v:bTrzdb6tXQl2sgQZSzH","tlshash":"21231cb8e54c41d5a731c04fbf82b3b861baf73ce5854d95f00e691c2ad26a811c5fba","first_seen":"2023-04-14T09:12:49Z","last_seen":"2026-01-02T07:07:01.408603Z","times_seen":7,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/js/bootstrap.js","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/js/bootstrap.js HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2020 04:41:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13129\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32075)","md5":"9b3583bf333b833d26aff3ec86989594","sha1":"da4286cdab68853cd62f25ea2cf9925a5b315847","sha256":"488e4ba42bd13664529f64f7da11a103c4c2d41249eb75ff48b3cefc06c2abe5","sha512":"668a7a4d10e455cae5d387497e12405d1afc93534becf17d0aff915a6d6e61ad8cd0ff8feb4c4d60f755af7ba7e0f90eb6aa01950e342b70cdce6684c61f60f9","ssdeep":"768:JVCgM5KXrrcsU0n3fEHVAqcy6jOD0Ydkg+/ONU65Z+o+fSNx7eXs/ZWSMEMGLleN:JVjMyrcsU0nvRJOhzGqNxi8/86W02Dh","tlshash":"fe23b509725074a2079fa475527b050bb33b285ea60a94acf999d8fd2dbcd4c7327f38","first_seen":"2026-01-02T07:07:01.41005Z","last_seen":"2026-01-02T07:07:01.41005Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/images/ex.png","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/images/ex.png HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jul 2021 15:52:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8180\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 338, 8-bit colormap, non-interlaced","md5":"4292d595f45db8cc84bac8a325ae1afc","sha1":"2b47ac78d2959d73d294b57f69ee7300451c4ffa","sha256":"5cfa556160a353d37185d8cbcf478f97b215f7d57d9821f20981bd0a4ad1fdd4","sha512":"674abda1a7e7eaadee52e4a96adbe197136565a671b9367e6e266e5c282eee5117a69bd1cd36b3dbdef719026f31790e57238c7335364fc109a0eabb1084eb7a","ssdeep":"192:BfcyWAnKGhxBhTnXHXRU1cxde45rTLkbbS2Se:1cyWAKGhxfXHBU23e45zk13","tlshash":"5bf18d3306c5254bfba472b733a641d50ae46c612b39e053a47a0dfc2e7cb3e90d5269","first_seen":"2023-05-10T01:23:03Z","last_seen":"2026-08-12T08:55:50.482768Z","times_seen":132,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/images/spinner.svg","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/images/spinner.svg HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 24 Mar 2022 13:39:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 649\r\ndate: Fri, 02 Jan 2026 07:06:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6205,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ec6884b65bb8318e4134cd488d1e3f0","sha1":"902d4e091aeeb1526688ce9036ea191e1887cd96","sha256":"de08ca0070cec9cf61302c3c8b32978902bd27d7184811d23cc45e934966d70e","sha512":"0aa01d7b4b85a6457bd9942f7b2a0a1cc41406e6e111008b051a4213b20f0b2ea7ec5c9ac92415a21e8127c2fac8ccccf34bc561eb964924d2db26a72134ff3e","ssdeep":"48:OLx2COXutUhm/F2XutHsXTcXut1lzqXut+mZB2cXutbnENkuIXutkonXutJnE8qF:qPWhOY78iO/J8iNhO","tlshash":"b4d14835ea018c0b4a24527ff3ce1941645de7ab6747ccd9b1927e3f718498e90ed22b","first_seen":"2023-05-18T17:15:45Z","last_seen":"2026-01-21T03:04:49.022375Z","times_seen":5,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homeyazilim.net/excelprotest/excelprotest/images/logo.png","fqdn":"homeyazilim.net","domain":"homeyazilim.net","tld":"net"},"ip":{"addr":"45.158.14.4","port":443,"asn":207326,"as":"HostLAB Bilisim Teknolojileri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homeyazilim.net/excelprotest/excelprotest/","date":"2026-01-02T07:06:36.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.homeyazilim.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:14:35 GMT","end":"Wed, 25 Mar 2026 22:14:34 GMT"},"fingerprint":{"sha1":"30:3F:B9:F5:26:77:B1:F9:E1:7E:FE:57:6A:0C:69:65:19:C1:D7:CB","sha256":"10:E0:BC:6E:1C:2B:55:B3:BF:C9:76:9F:2D:13:2A:F6:60:64:22:D1:A2:AE:D1:83:6C:DD:D8:84:B5:92:EE:FC"}}},"request":{"raw":"GET /excelprotest/excelprotest/images/logo.png HTTP/1.1\r\nHost: homeyazilim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://homeyazilim.net/excelprotest/excelprotest/\r\nCookie: PHPSESSID=547db7ca2b108209e37e6421553d70fd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 07:06:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jul 2021 16:13:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58256\r\ndate: Fri, 02 Jan 2026 07:06:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 1964, 8-bit/color RGBA, non-interlaced","md5":"da7d3afa81ca3f0769fb85f58e55b47c","sha1":"1d02dd7bff8bebfa50f78b6c624256504212287f","sha256":"53e2e695462e89a66c56d328d8baec8151800be05b878370a38601e5438b3d82","sha512":"2754009763d398e6e1feba38546f76dd9ce8e31a8334771f86205c5a28b65902ec8143817dc31d3af9e3b284145fa467c7698b5be5df9dd6b86c9e6f8cdeeaae","ssdeep":"1536:HVSheQbS3JsnoeKOR1jQSb0OOoA5pgYs46uE6ntXTM06Ni5333333333TRG3J38:1SheQbyQRpb075pvRGs","tlshash":"55438d7ae4a12aa6c648c7f167274f11f6b1547a4130930a4772f2e96cfbb47fc8b109","first_seen":"2023-05-10T01:23:03Z","last_seen":"2026-08-12T08:55:50.490686Z","times_seen":139,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"homeyazilim.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}