{"report_id":"1f38dae0-675a-489a-a893-b6773e85778f","version":6,"status":"done","tags":[],"date":"2026-01-03T16:09:23Z","url":{"schema":"http","addr":"krediye.sbs","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"krediye.sbs/","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"title":"Online İşlemler | Giriş Ekranı","dom":{"size":41992,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (600)","md5":"2a1ce022d819c28851ea0b199348de8c","sha1":"573307e0db584716c0f6136a26e38ce891b795ed","sha256":"c01df363811b2f8a5b59eafc364dc53c756f305a489ff91bcebe1e876183a2fb","sha512":"371544e7bd52c49923fcf840b6f4b50e00988a8d32897036e0d22655d073e9313dc6eb27375e6447c663cb96fd91a0b66add6f9b8c250faed73ce3c17dabe38e","ssdeep":"768:g6ubrXET4cHBBPDjyEKnwRngKnYMjxT4mHBBB9XyTUGvsTsy:FubrXET4wDjFuwdguYMjxT4S9CTUGvsd","tlshash":"e713411058f6042712a390c4b9e9af0a2e81d317d70a8e04bbfc4bd1afc7d9add9716d","dom_hash":"domhashe93ebd7dd382a777d1567e7d15b3c1f7","first_seen":"2025-12-31T15:13:40.692488Z","last_seen":"2026-01-04T21:37:38.964295Z","times_seen":9,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krediye.sbs","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T16:09:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"krediye.sbs","ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":84,"request_count":21,"received_data":1268552,"sent_data":11635,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-28T22:27:44.219613Z","alert_count":0,"request_count":1,"received_data":90390,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-08-12T05:40:55.686103Z","times_seen":27336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a57552839dbffa2352c85a9fc72f144b","sha1":"f5754ca9b9e0575245122a310251708c9420db3d","sha256":"b6a5f42cfb96646f08e12c6da6d5c7810b74eea6504d155ef5b1657709ec3ed1","sha512":"e11e3502bf64391a879a04a7bea0ae0d66dc11e1314fe0cbd38ab1a5430fd811a0c05148c66dcf2913f7de4606625cce35335cf147dc3f8ec6352bf33e1fb3b7","ssdeep":"","tlshash":"bae0ab8d3c52b42737f97678c2238a6b26a20b00358396288646cc29646488b5487c8e","size":418,"data":"","first_seen":"2025-12-31T15:13:40.723417Z","last_seen":"2026-01-04T21:37:38.981002Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"76f86d7fa1201a3c40c319821695a9c8","sha1":"5f3374658a73f7225e48add790141d1b83345837","sha256":"e4d83c76f53c9998bff7c998aff37df7d90d1a2cd20d4f71bba10f604da91f41","sha512":"62aa340a678d7bff3ee4627d0ddff1a3cfc4e0ced30fa93559058c3951d3afe79d426e4aca35c72dab9040cf27e585df422a48951f9302fef99f22dc0c08fe1a","ssdeep":"","tlshash":"d5c08cf530f770e842a3b27e07e7cd02d15644078148c701348c0e117f6581b8680255","size":159,"data":"","first_seen":"2025-10-25T00:32:12.824484Z","last_seen":"2026-01-04T21:37:38.981842Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c76d55e975f98b2c651cf46a130f423b","sha1":"43db8165207bb51703e69b0d6230026827cdcde6","sha256":"21c03e093223d0b9a3d80168f465a5e52eeae0599dcdabe14696a29759fc3a75","sha512":"db326604cfb2f414c1767fe0df3a6f80a4551c26e2e37c6c7d9c29fefb8cd2a6613661093407922a70a949d17aceede1f44f1439fb50450d900fffa73457cdba","ssdeep":"","tlshash":"ef119b1595e3034aed4e285c9bae422c11d643133992cb35bdcce1282f9dce6a4adaf0","size":973,"data":"","first_seen":"2025-10-25T00:32:12.825758Z","last_seen":"2026-01-04T21:37:38.982734Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/client-side/script.js","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a182fc9fa09aac7a61a6b550134ac688","sha1":"fa3cee1578eba407610b89b1ed4d5969ec8c16a4","sha256":"bd22c7c75b49eb76c90832e976111aaa99029c14a13d1081fb94a454be2c2199","sha512":"d2765e768043beb5ce402d6a738aa78b1418f842ee9a3be0a76b5d8288e21d20639375c2aa0cbeea6094cddfee52c5dc466737a469411a6169329096573c225e","ssdeep":"192:YNCrIQm7HLYID83taA4RIXfIcGAEUd9ayWQP4Ff45WGs7N4Hc4mGfe77M4TFweoI:vB3B46fzP4Ff4MN4Hc4Ne/M4PoQQk","tlshash":"63120e4867f319524d37b07d1b8fd119b3b8c84f6009de497c9c8690af96b7889f2e98","size":9265,"data":"","first_seen":"2025-12-31T15:13:40.713577Z","last_seen":"2026-01-04T21:37:38.974883Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abf8d5b115c659e47dc1ffaea96173e","sha1":"2e06986b35b12ad06530d02e8052e0f161c136f3","sha256":"b21f85440e65d8dbaa9a7719676a29aae18440eb9e4f89e750268d3f1a8d9e78","sha512":"13876f57fbfb5e03b24e60cae37bf69c3a8a74d47d999bf1e8e7cd91527d4c8de83eb8e88df0142e659b7e473581cf4f34679ec73284717a5d192a9a79667cf6","ssdeep":"","tlshash":"be41cf5b66f6042a077fb07a569e990ab63b40434349fd543c3e6340afd1eb4b4f069a","size":2434,"data":"","first_seen":"2025-12-31T15:13:40.732155Z","last_seen":"2026-01-04T21:37:38.983594Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/img/login-bg.jpg?v=20181004","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/img/login-bg.jpg?v=20181004 HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krediye.sbs/Content/assets/bundle/css/sub.min.css\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106717\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-1a0dd\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106717,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2560x1440, components 3","md5":"dca8dcf5aa17b37001d2464c6e8df135","sha1":"fb5b6ac4a585e88b3de8a5fbc3b2b14f597d5669","sha256":"b055c452bbb3790a25caef40ba7e75a53f148ad46260c00719b5bd7b6ee90d82","sha512":"ac9ca12446e20024093cd5c36b715e7912393831fa15d66f64e6e6b43b2e186ee3bc27b5a7f205a5d510ab680a6193bfa80d57af1e9a08767e6394ded238c5f6","ssdeep":"3072:9B+/FeyoFsb932eGZZvbPm8A0DEX6c0jajAO:9B/tZ5M8O","tlshash":"6aa3af3bb315db06c4cc2775f9e34b0e7b2688b1262d81a7f1eb4a7166fb3052ca5164","first_seen":"2023-06-03T13:02:04Z","last_seen":"2026-05-02T15:41:18.913688Z","times_seen":102,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/api/process.php","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"POST /api/process.php HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://krediye.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"action=checkStatus"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.4.15, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/api/process.php","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:06.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"POST /api/process.php HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://krediye.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"action=checkStatus"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:06 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.4.15, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/api/process.php","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:12.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"POST /api/process.php HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://krediye.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"action=checkStatus"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:12 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.4.15, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/api/process.php","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:18.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"POST /api/process.php HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://krediye.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"action=checkStatus"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:18 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.4.15, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/bundle/css/plugins.min.css","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/bundle/css/plugins.min.css HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: W/\"68f42485-555ae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":349614,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62330), with CRLF line terminators","md5":"57b30668ab9cffa3d983cfc2fdd95388","sha1":"76fbd467f2291a2b0bb49d9c926f8ca01083ca09","sha256":"ee81740f6cc74f3e18b1a459058b371b76febbc1ae8b6365783f17a046212719","sha512":"c6f31b0cfed60e68121898a326fb408089ff42e8a818360473e32f4a845fe244bd25071a6e2f0c64f330231867537d05bedc07812e0410ffeed029e5b8ca187f","ssdeep":"6144:xJhMoQ0pFD64s4t75RX8kd/v/w3ZcAEX1bY9WfDGq:xJfQ0pFD64s4t75RX8hVq","tlshash":"e074b560b50135efb62fc829b6d0bbe6167db243d4121e7df09729a88fc97e61137902","first_seen":"2024-09-05T19:12:50Z","last_seen":"2026-01-04T21:37:38.965554Z","times_seen":25,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/api/user-join.php","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:05.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"POST /api/user-join.php HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nOrigin: https://krediye.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:05 GMT\r\ncontent-type: application/json\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.4.15, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"23f003803987b8f8406c7b1fe042cf20","sha1":"3585179d56e07abf05e59c855c58ccb0b0ef81dc","sha256":"c71f0489fc150bcba0dac5f4be72f571da9f86fbe2bd25e4a01cc1ab4cfb6f3e","sha512":"dd04063330f3ffb46d8e0a73807048ded74dde1de611eb09c17d1e3cd71fa93f07f513accb00d024eea6d56079e8f7ddc507babf431f242be93fcdc3157e6242","ssdeep":"","tlshash":"a6800000000802ae8b828ae200830020abb20aa3332e08e000cccba00c2b2888a2a200","first_seen":"2025-10-25T00:32:12.820043Z","last_seen":"2026-01-03T19:52:44.110052Z","times_seen":9,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/api/process.php","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:09.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"POST /api/process.php HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://krediye.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"action=checkStatus"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:09 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.4.15, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/api/process.php","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:15.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"POST /api/process.php HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://krediye.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"action=checkStatus"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:15 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.4.15, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/bundle/css/sub.min.css","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/bundle/css/sub.min.css HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: W/\"68f42485-8753c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554300,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (405), with CRLF line terminators","md5":"cd1b2f9434bf2b2d4f4bd343073c57c9","sha1":"6e895fd11083cd33ac01004c69266248829cee99","sha256":"50b033e053c9707c86314ed31c05d31fd1768ede279d4b676de687d6b19ca122","sha512":"1834783d02c55f5646f1258e717f8cf18e3fa4b7b9dd5bd6e6948d534503e772075b44b16c85b988d48a18726f3a4c4abef26881d8604d8761ab1a95b6b149d6","ssdeep":"3072:0hrFeHYKOhjEVqgJJK86VfjOcS349lB7OeF39hxQqQByaez7:0hrvVfj3xQqQI","tlshash":"64c44561da42214b3637df79bba62755ff290033970215b8bbc9b118cff86a541a1f8c","first_seen":"2024-09-28T01:41:05Z","last_seen":"2026-01-04T21:37:38.966519Z","times_seen":21,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/img/phone.png","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/img/phone.png HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 8378\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-20ba\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 99, 8-bit/color RGBA, non-interlaced","md5":"77c1a0351dddb65a5f6fcdadf54ca5be","sha1":"a278215761ef4768645ce1321629a2c12ea9d988","sha256":"ecd0bd452254e541bd3e0f90384daf729c71bac57dcd6506ce531b82e91a6077","sha512":"fa2d482bfa5064ee04c4e6dceac6815117020879618c56a79e5f7710bf80a23e584f83228114c4791c174edfe271b57476ff5933a02bfcae9fe72f9d5ce2215e","ssdeep":"192:TfHmsIVDYHHPatQq+z2SVA/TGVJrtLonLcVITmvQIa0:jmssDlqFVAS/2Xa9a0","tlshash":"cf028dedbec039527685ff5010b5a53428592e0c92ccd5d699cadc1640642ba7eee0d5","first_seen":"2023-06-03T13:02:04Z","last_seen":"2026-01-04T21:37:38.972803Z","times_seen":60,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/img/login/phone.png","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/img/login/phone.png HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 9783\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-2637\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 99, 8-bit/color RGBA, non-interlaced","md5":"11054be60d9bcdcc073dd86b19eaeff5","sha1":"0a3e9722e8215d52e257b870da7b04f988609b64","sha256":"75e159dc563cef2d81dfc676edd0562791341ffc58e8fb9d377011d4fe0977ae","sha512":"23e06ec12f474ab1ab6cc37dbc766b7861f9f9bc368cc88310efd96cef300ac7887dc42c75359289faea683d55b4750fb2d6ebcb339b95456faa8de0f1ad592f","ssdeep":"192:KhIj0VKZLus6l6eZnk/hq36dTAvWYcnAe8C8nCKhs3YmJ4P5eHJz:KWpusw6eZk/hq3u2NeXaTs3YmJMKJz","tlshash":"2812b088ecb734a52645ca9e7cf8c9071d6388a08cc6c443f6dec67a58dc67549734f5","first_seen":"2023-06-03T13:02:04Z","last_seen":"2026-01-04T21:37:38.97334Z","times_seen":53,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krediye.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15ec3\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\nage: 3830350\r\nx-served-by: cache-lga21953-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 104614, 59155\r\nx-timer: S1767456540.327177,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 31011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-08-12T05:40:55.686103Z","times_seen":27336,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":38,"dns":1,"connect":14,"send":0,"wait":14,"receive":5,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/css/webfonts/new/D40DF048D299CA4DD.woff2","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/css/webfonts/new/D40DF048D299CA4DD.woff2 HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krediye.sbs/Content/assets/bundle/css/sub.min.css\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13476\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-34a4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13476,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 13476, version 3.13173","md5":"c7735d60da8580476a4a0cf8fcad2a20","sha1":"01bb2b7f3a55789655f622130e652562da68deab","sha256":"87066901222869bbc18ab6d6620daa3aeac78dad94f88233f14ff68bae4cb472","sha512":"d3e62fc2b3bead40cd8dc7304d0f1713d20452e56e00060017347fee8e46bcdd4f7aaa907d36cc5a905ddcaba87b4b6be1bced2e1e4612508c90a641abac7f8d","ssdeep":"384:+s0gth073ilYqZrTxzDkhkEDqT7IGAVui9XDGTl:+s0gthCNk/x8Uw/0i9XCR","tlshash":"d252c0ac79f91c6dcaec85b2b520771650442df997eef4207fd28038b0e56eb1ad7042","first_seen":"2023-06-03T13:02:05Z","last_seen":"2026-01-04T21:37:38.969126Z","times_seen":90,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/css/fonts/icomoon.woff2","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/css/fonts/icomoon.woff2 HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krediye.sbs/Content/assets/bundle/css/sub.min.css\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 100000\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-186a0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 100000, version 1.0","md5":"a8fd26643e91f65ce225f959814f5024","sha1":"9121db4aeda7b816ad442e5b66eb17b5063568f1","sha256":"4eb0a95d46a2a21d2a033af489807a56e8669c172839474ed2ab8865ee40994f","sha512":"c851c21d61cc599fd9ee8791723f6035e681eff71babc41a89ed2476a842f077ffeee1ebb921ae46b32b30ff10a3cb989227ded33cc0b309cdff9fe960680cb3","ssdeep":"1536:PwfJSJ9Cnur+ElVRQfQQUhTzkP6Dtiu/sOCj1kEouO5WmNqrO3GXqJU+/5ap0uS7:YRGu4ruYuIP/ZCR4dBqC2aJU+/E2umL","tlshash":"25a312ba78bd77e16a62c1f0732f217d916141af3c3d09ba083e8513f94e2d69c21729","first_seen":"2024-03-28T05:48:03Z","last_seen":"2026-01-04T21:37:38.97631Z","times_seen":48,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T16:08:59.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7180\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-permitted-cross-domain-policies: none\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nset-cookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a; path=/; secure; HttpOnly; SameSite=Strict\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":41900,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (600)","md5":"a9bbb0638ee35d5989be98466d394f02","sha1":"9cc349ea42ceaddeadba018c16e73c17489ec5d6","sha256":"56fcbb0b5551cfc3fe26d228efaff9d690df7ef3d0f84004d0b52382ef2e09a2","sha512":"30cd9202b208e255b0384a9397b5216056835d811b1c205ef800c2422df5df29dc27f4ad7a393f74629097a7896efb68b62fd6e05667a340ecbbb7871c48a734","ssdeep":"768:fKNbrXET4IHBBPDjysKnIRnwKnYMjxT4mHBBB9XyTU0vsTsm:iNbrXET4eDjPuIdwuYMjxT4S9CTU0vsd","tlshash":"99134f1058f6042712a390c5b9e9af0a2e81d317d70a8e04bbfc4bd1afc7d9add9716d","first_seen":"2025-12-31T15:13:40.706981Z","last_seen":"2026-01-04T21:37:38.980392Z","times_seen":9,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":207,"dns":154,"connect":23,"send":0,"wait":44,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/img/comodo-logo.png","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/img/comodo-logo.png HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 6295\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-1897\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 44, 8-bit/color RGBA, non-interlaced","md5":"cbdc765e52e5f7b375f2383106593f05","sha1":"fe32420e40a43a85fbbabad75928ad08942c03a1","sha256":"7bd1ce5e91f7fa685fe3ec37c7f79c27a49f3ae067afce596fa46bb5b2d90d89","sha512":"3c8ec33a749cdec12fb177ea68c52bf74f730741727265f446464dfcca9c3b648bdf61c15cc5fd25aa8c796109ed6f085e7d9446b3952bb4068332d80a33b2c4","ssdeep":"96:UaFPFaVJZ+24MkecQovQKlm465b9vu8Cn7UAVrip/DBMnlOlrT3+sMfR:NFtatnkxQoYzTVCn7UANip8sv3+s+R","tlshash":"cfd19e34827ac6a0860e9d02ec5ffa0df62b037b98d4db11815a19b62c4d1dd2e66d78","first_seen":"2023-06-03T13:02:04Z","last_seen":"2026-01-04T21:37:38.967562Z","times_seen":92,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/client-side/script.js","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /client-side/script.js HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 30 Dec 2025 16:14:14 GMT\r\netag: W/\"6953fa56-2431\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9265,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"a182fc9fa09aac7a61a6b550134ac688","sha1":"fa3cee1578eba407610b89b1ed4d5969ec8c16a4","sha256":"bd22c7c75b49eb76c90832e976111aaa99029c14a13d1081fb94a454be2c2199","sha512":"d2765e768043beb5ce402d6a738aa78b1418f842ee9a3be0a76b5d8288e21d20639375c2aa0cbeea6094cddfee52c5dc466737a469411a6169329096573c225e","ssdeep":"192:YNCrIQm7HLYID83taA4RIXfIcGAEUd9ayWQP4Ff45WGs7N4Hc4mGfe77M4TFweoI:vB3B46fzP4Ff4MN4Hc4Ne/M4PoQQk","tlshash":"63120e4867f319524d37b07d1b8fd119b3b8c84f6009de497c9c8690af96b7889f2e98","first_seen":"2025-12-31T15:13:40.713577Z","last_seen":"2026-01-04T21:37:38.974883Z","times_seen":9,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/css/webfonts/new/BB78E1BCF28E9E4CC.woff2","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/css/webfonts/new/BB78E1BCF28E9E4CC.woff2 HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krediye.sbs/Content/assets/bundle/css/sub.min.css\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13468\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-349c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13468,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 13468, version 3.13173","md5":"258bc9481b04a70f90de84e933445da7","sha1":"f02651019a9b4f4f02b6c1a83b3c954d37129c9a","sha256":"2f9071e4de731c949bee363cc182a5b88e61caa7cffbfd3ccf7321ca11327544","sha512":"1b5194b81f0f644e362ecdd05825c94d0a0fc4bd13cf576843889e9d35cb3959d1ccc8494412966e48ad6e9ca1ddfe3eb4f50873d39e9fd569c8dcb103d256e4","ssdeep":"384:kZhzW85fkhjiDdM5ZJd1D2f46Si2tkFguJTTJ:kKjjiDdM5ZzEb2iguJJ","tlshash":"7a52c02b8a4c964944fa5e8fdc46468cf1d9035f7ea67c231f2549ee0aa8807d4fc07e","first_seen":"2023-06-03T13:02:05Z","last_seen":"2026-01-04T21:37:38.97744Z","times_seen":87,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/img/touch_icon.png","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/img/touch_icon.png HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 24678\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-6066\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"55083b4242e9e0a4be40324fc2b1d561","sha1":"cdcd79c42cdb7239cbf3961916e62072c77c9154","sha256":"3f57f2ca6d11bb33c055ec016ce0b3c7816097de2bdbdca444b11f0ba90bf166","sha512":"4db0f776dcf4b70d87515082f20b55b89b13a0cbe9458a19078fa0f529080a87af3acf8c8ea63ea74979b262b23e1167d1edc192fade66731fdc75a1c102f334","ssdeep":"384:0LqU+XUQEetK3w/GUqZVr9hklb+L1REaWogegpUUo/i4v6Ht8LDlaHyN6iXcSm6Q:0LqU+pEeQw/GFr0+XEavgc7SHulmQ4kw","tlshash":"e5b2e1c7a763268c1d39276fb8d322b420fb899f52f820149ddd5efa2f850747431992","first_seen":"2023-06-03T13:02:04Z","last_seen":"2026-01-04T21:37:38.968624Z","times_seen":67,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/Content/assets/img/touch_icon.png","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:00.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"GET /Content/assets/img/touch_icon.png HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 24678\r\nlast-modified: Sat, 18 Oct 2025 23:36:37 GMT\r\netag: \"68f42485-6066\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"55083b4242e9e0a4be40324fc2b1d561","sha1":"cdcd79c42cdb7239cbf3961916e62072c77c9154","sha256":"3f57f2ca6d11bb33c055ec016ce0b3c7816097de2bdbdca444b11f0ba90bf166","sha512":"4db0f776dcf4b70d87515082f20b55b89b13a0cbe9458a19078fa0f529080a87af3acf8c8ea63ea74979b262b23e1167d1edc192fade66731fdc75a1c102f334","ssdeep":"384:0LqU+XUQEetK3w/GUqZVr9hklb+L1REaWogegpUUo/i4v6Ht8LDlaHyN6iXcSm6Q:0LqU+pEeQw/GFr0+XEavgc7SHulmQ4kw","tlshash":"e5b2e1c7a763268c1d39276fb8d322b420fb899f52f820149ddd5efa2f850747431992","first_seen":"2023-06-03T13:02:04Z","last_seen":"2026-01-04T21:37:38.968624Z","times_seen":67,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krediye.sbs/api/process.php","fqdn":"krediye.sbs","domain":"krediye.sbs","tld":"sbs"},"ip":{"addr":"167.99.38.75","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krediye.sbs/","date":"2026-01-03T16:09:03.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krediye.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:38:04 GMT","end":"Thu, 02 Apr 2026 17:38:03 GMT"},"fingerprint":{"sha1":"96:A9:BF:07:44:0C:FC:51:2F:19:D0:5D:EC:5C:00:36:B2:4B:6B:0C","sha256":"3D:EF:6D:B5:1E:BC:76:EA:B7:7E:2F:FB:C0:D3:B7:38:04:72:76:45:C3:9D:46:84:DA:C7:1B:51:62:F8:17:A2"}}},"request":{"raw":"POST /api/process.php HTTP/1.1\r\nHost: krediye.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krediye.sbs/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://krediye.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SECURE_SESSION=08cdeb6b21170170cd3677cac5fb3c3a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"action=checkStatus"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 16:09:03 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.4.15, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"krediye.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"krediye.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}