{"report_id":"2a56dc8c-3bd7-4212-9096-761293a41204","version":0,"status":"done","tags":[],"date":"2026-09-23T09:17:47Z","url":{"schema":"http","addr":"ratemmobile.com/","fqdn":"ratemmobile.com","domain":"ratemmobile.com","tld":"com"},"ip":{"addr":"77.245.159.13","port":0,"asn":42868,"as":"Niobe Bilisim Ltd. Sti.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"http","addr":"ratemmobile.com/","fqdn":"ratemmobile.com","domain":"ratemmobile.com","tld":"com"},"title":"ratemmobile.com | Hoşgeldiniz...","dom":{"size":12926,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (840)","md5":"c33be456cd26e55d0d2b1025a2ea4abb","sha1":"6f2085bb5e4a910d8148e29aa4d05d16322f2dbe","sha256":"8ec5a1ff9d3baf885406228dc52a9d37c10ec9646973704461cad0c12eef298e","sha512":"6912d6f70514ce9c5d573afcc47208ad723d00b300f903d4b1ae30f5e9d6bfddcc347687b45f76ded2ef901fed6d5e4d12dff0a49d53352a6300489db3205a23","ssdeep":"384:X1BfE06CtwF0XFJ98QlY9X2aWYZ0iYogKI+ibQ/hTA9io:X1BfE06CtwF01JNYt2XPxKI+4+hTA9io","tlshash":"fb42e942571c890ef107439c7c79368e257c79daea019aecf5f73295d88a4ff8032a94","dom_hash":"domhash834ebcfff5a8207083f226c8f0fe8c4b","first_seen":"2026-09-23T09:17:53.628488Z","last_seen":"2026-09-23T09:17:53.628488Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ratemmobile.com/","fqdn":"ratemmobile.com","domain":"ratemmobile.com","tld":"com"},"ip":{"addr":"77.245.159.13","port":0,"asn":42868,"as":"Niobe Bilisim Ltd. Sti.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T09:17:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"ratemmobile.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"ratemmobile.com","ip":{"addr":"77.245.159.13","port":80,"asn":42868,"as":"Niobe Telekomunikasyon Bilisim Teknolojileri Yazilim Danismanlik Sanayi ve Ticaret Ltd. Sti.","country":"Türkiye","country_code":"TR"},"domain_registered":"2025-12-28","domain_rank":0,"first_seen":"2026-08-17T21:56:31.514908Z","last_seen":"2026-09-23T09:13:24.428881Z","alert_count":15,"request_count":3,"received_data":23161,"sent_data":1302,"comment":"","tags":null,"fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.hosting.com.tr","ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-07-07","domain_rank":0,"first_seen":"2020-01-14T09:44:37Z","last_seen":"2026-07-01T09:43:22.598318Z","alert_count":0,"request_count":6,"received_data":2467223,"sent_data":3258,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-21T00:42:51.292364Z","alert_count":0,"request_count":1,"received_data":88786,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":10008,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":1,"received_data":35049,"sent_data":546,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ratemmobile.com/","fqdn":"ratemmobile.com","domain":"ratemmobile.com","tld":"com"},"ip":{"addr":"77.245.159.13","port":80,"asn":42868,"as":"Niobe Telekomunikasyon Bilisim Teknolojileri Yazilim Danismanlik Sanayi ve Ticaret Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"da2e45e5ccf7e8ba1846c0599a51b775","sha1":"406a283219ae68b11323ce427c1c40232c91f906","sha256":"e7c64c9498e3b9f314641aa96a3a70bfdfe6aa51566e2b32bbb8afb77023f9e2","sha512":"8eb5be107887b73828fd15459a4b4169aa5a27df0c25f3a5f6a2701532abf36af2c8f717f390c9f25579074563e8b778f493cab4bc08b6e299a7e9aeb119738f","ssdeep":"","tlshash":"afb09bfd1554994111d8905d3d553acab560778654507445100d15412d14d07cdb55d9","size":124,"data":"","first_seen":"2026-09-23T09:17:53.644676Z","last_seen":"2026-09-23T09:17:53.644676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ratemmobile.com/","fqdn":"ratemmobile.com","domain":"ratemmobile.com","tld":"com"},"ip":{"addr":"77.245.159.13","port":80,"asn":42868,"as":"Niobe Telekomunikasyon Bilisim Teknolojileri Yazilim Danismanlik Sanayi ve Ticaret Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"081d725e4b13f8b71ecbd68bfa253bc3","sha1":"bba7f4c7c901ebca9a6f20fcfb06e3f94bc65b5f","sha256":"34d54b3ee04c86febcf365f348556708317dfa40b65ecfdc12d0677d294ec0b3","sha512":"4e0271ba29bb4a250c69f70d844a84bb5fc8b081c1ae7b5ba0966af21325f59a642117acb6e2946eae94e5b21b55070586799270d0b942f1d6df0be8ee8697f8","ssdeep":"","tlshash":"4771f249976d5c4f9517139c2cde3acc1d3c57326e048baf786eb16a089017e026fae4","size":3617,"data":"","first_seen":"2026-09-23T09:17:53.645859Z","last_seen":"2026-09-23T09:17:53.645859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-09-23T13:09:45.425245Z","times_seen":141126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"before transition0","filename":"http://ratemmobile.com/","line_number":235,"column_number":13},{"level":"log","text":"after transition0","filename":"http://ratemmobile.com/","line_number":238,"column_number":13},{"level":"log","text":"before transition1","filename":"http://ratemmobile.com/","line_number":235,"column_number":13},{"level":"log","text":"after transition1","filename":"http://ratemmobile.com/","line_number":238,"column_number":13},{"level":"log","text":"before transition2","filename":"http://ratemmobile.com/","line_number":235,"column_number":13},{"level":"log","text":"after transition2","filename":"http://ratemmobile.com/","line_number":238,"column_number":13}]},"http":[{"url":{"schema":"http","addr":"ratemmobile.com/","fqdn":"ratemmobile.com","domain":"ratemmobile.com","tld":"com"},"ip":{"addr":"77.245.159.13","port":80,"asn":42868,"as":"Niobe Telekomunikasyon Bilisim Teknolojileri Yazilim Danismanlik Sanayi ve Ticaret Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:17:14.488Z","timestamp":1790155034488,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ratemmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Mar 2025 19:29:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nContent-Length: 4506\r\nDate: Wed, 23 Sep 2026 09:17:14 GMT\r\nServer: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":12246,"size_decoded":4799,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (840)","md5":"902ada0d237f3f8e97663f88ab0cb711","sha1":"d3362734cdf52178c8ac96daadc3c9a2dcd39355","sha256":"05de815504186e2b1182c04875b39b62a1b97c079fe546d4d122677f54a433a6","sha512":"273c246848aad90de7e283806d4a144f8304d52430e0fe4b33f1a6e552811888650a04d455d41436eff7c8003ccef8f0e988d3b1ebdb4d5ecd1af90289428f2a","ssdeep":"192:YJHVBfpl06CtRa8jC3j4dj02JFR7EdqlYKMQ2BOpix+zK1Z+yNLy3p0/FQE4ULjz:o1Bfv06CtwkFJjlYq2B0iYzKX+ibQ/hE","tlshash":"0a42e746570c890ef103439c7d69369e297c78eaea4196ecf9f77285d8854ff8032e98","first_seen":"2026-09-23T09:17:53.630836Z","last_seen":"2026-09-23T09:17:53.630836Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2891,"timings":{"blocked":-1,"dns":2044,"connect":104,"send":0,"wait":105,"receive":638,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"ratemmobile.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hosting.com.tr/hosting/defaultpage/bootstrap.min.css","fqdn":"cdn.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:17.157Z","timestamp":1790155037157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /hosting/defaultpage/bootstrap.min.css HTTP/1.1\r\nHost: cdn.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 30 Sep 2026 02:13:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Dec 2018 18:34:11 GMT\r\netag: \"22688-5c1154a3-7d45bfdeeef0a6a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Wed, 23 Sep 2026 09:17:17 GMT\r\nserver: cloudflare\r\nx-powered-by: PleskLin\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 25449\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=2592000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHUNsOFLkZXwiQ29fG66pQBj5iWVT3J7AA6sBp4pwH%2F%2BKdntC%2FnI15e3mDm2Clxl7QNz%2BEdApcWDcuN5W7WIFW%2BzR96gwpg9YSvbSGsoJe39wNSNsIBROBzLv17bsxXRASUbiw%3D%3D\"}]}\r\ncf-ray: a3f8749b0bc3712b-OSL\r\ncontent-length: 19090\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":140936,"size_decoded":20049,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"04aca1f4cd3ec3c05a75a879f3be75a3","sha1":"675fcf28f9fbf37139d3b2c0b676f96f601a4203","sha256":"7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11","sha512":"890415fa75ed065992dd7883aed98bfbdfd9fa26eec7e62ea30263238adca4eecd6204f37d33a214d9b4f645ad7d9cc407d7d0e93c0e55cf251555a8a05b83ff","ssdeep":"1536:un1QWSUPBT+QYYDnDEBi82NcuSEz/NvT/gIENM6HN26e:q1L7PDxYIENM6HN26e","tlshash":"bdd373a7f5a0312da467c61864d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2023-04-05T03:23:19Z","last_seen":"2026-09-23T12:44:16.235802Z","times_seen":23305,"resource_available":true,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":97,"connect":35,"send":0,"wait":87,"receive":41,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:17.384Z","timestamp":1790155037384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.4.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15851\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 23 Sep 2026 09:17:17 GMT\r\nage: 4977490\r\nx-served-by: cache-lga21965-LGA, cache-bma-essb1270043-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 19752, 34235\r\nx-timer: S1790155038.540377,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":88145,"size_decoded":31279,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-09-23T13:09:45.425245Z","times_seen":141126,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":0,"dns":35,"connect":41,"send":0,"wait":42,"receive":344,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hosting.com.tr/hosting/defaultpage/bg-1.jpg","fqdn":"cdn.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:21.420Z","timestamp":1790155041420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /hosting/defaultpage/bg-1.jpg HTTP/1.1\r\nHost: cdn.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 29 Sep 2026 16:50:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Mar 2020 11:39:58 GMT\r\netag: \"a22ea-5e6cc28e-f82ac3f2254ba830;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Wed, 23 Sep 2026 09:17:21 GMT\r\nserver: cloudflare\r\nx-powered-by: PleskLin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nstrict-transport-security: max-age=2592000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mvKvt38q%2B6VsBKpqSTSW3QnDUh%2FykAvi%2FpXUNGgeF2upCFL2zP%2BcW4nrUrld4FPZnWXqHpxMRowMuqB%2Fbm8hl%2BnKVwRde7%2BiIgs9in5GwRZ5Ak5OX9lVMeUqEz070%2FAkFNFzw%3D%3D\"}]}\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: webp_bigger\r\npriority: u=1,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 59207\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3f874b10db3712b-OSL\r\ncontent-length: 642809\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":642809,"size_decoded":643771,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2000x1500, components 3","md5":"bfa82cb43f096055fdebef038a20e99c","sha1":"1ff4516f39c10e2dc1a95bf43078b72772bca7cb","sha256":"5698ab8af04536c7d4814f97fdc7ebb6ae5ec7c7b2e3e8f89ac1d8b36bab17df","sha512":"d3b6e018788b4282b81fefa64f98cf3119e66c355265d6114085b6acf94b42ffbc3b28be9d7fe26d364b09608b4afe6453671c4a8b2a1b005f637f7f814a864a","ssdeep":"12288:57Xbyn5rB1qag08exgBhC9HHuO7UsNMIj7s618aa8RaxEzq:53M5rB1MpeGBhuHLAK5nsQQ8fW","tlshash":"0dd423475ae2adbac9fda2f51b8e73afe04b4f84578d80cd0f3ba815148459c3807667","first_seen":"2024-07-02T18:15:07Z","last_seen":"2026-09-23T09:17:53.634037Z","times_seen":3,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ratemmobile.com/favicon.ico","fqdn":"ratemmobile.com","domain":"ratemmobile.com","tld":"com"},"ip":{"addr":"77.245.159.13","port":80,"asn":42868,"as":"Niobe Telekomunikasyon Bilisim Teknolojileri Yazilim Danismanlik Sanayi ve Ticaret Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:21.639Z","timestamp":1790155041639,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ratemmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nDate: Wed, 23 Sep 2026 09:17:19 GMT\r\nServer: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10384,"size_decoded":5263,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4070)","md5":"6e4c6c91ac2c7e09cb098f22adb71292","sha1":"670b3cb023bf88e151a89925b8abdf7686d99063","sha256":"dbb9d9e4f21c3c705bcb46a1728084145236ad6538efd5aa7c415011c4a2e23b","sha512":"2b6f30b886766e21f6f9a4848384a891150b4147f9db1113d665f3b530c23bba0bd86c33343afc0320e540c5318909ce52a1171d701e0d16d0bba9063b26830c","ssdeep":"192:rlYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93Je:FVGaRF8I8qV9x3","tlshash":"2422a69b1ae3000b744760b967aa2211ab68e543d11fcd607f4db3e8cf869818c93b5d","first_seen":"2026-09-23T09:17:53.635551Z","last_seen":"2026-09-23T09:17:53.635551Z","times_seen":1,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"ratemmobile.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hosting.com.tr/hosting/defaultpage/bg-3.jpg","fqdn":"cdn.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:29.506Z","timestamp":1790155049506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /hosting/defaultpage/bg-3.jpg HTTP/1.1\r\nHost: cdn.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 30 Sep 2026 09:17:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2020 11:34:42 GMT\r\netag: \"8f3db-5e6f6452-e079ddb86961f277;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Wed, 23 Sep 2026 09:17:29 GMT\r\nserver: cloudflare\r\nx-powered-by: PleskLin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=2592000\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzYUGmJ2zCVVvKArRWSBEpQ6NMWqHZaGUF64aGg5E7fNRTMM30WKR%2Be8%2F4%2FH8wJgC7aCL4IZ35EiKg5msJvqVu4RrUZ8UCfEKDuqk8go7Vf6mR1zEWVbMGDIvYHfqTQM4%2FJ7NA%3D%3D\"}]}\r\ncf-ray: a3f874e38a4b712b-OSL\r\ncontent-length: 586715\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":586715,"size_decoded":587608,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2000x1500, components 3","md5":"c31d98ab4cebf6293c07ce91fd14d85a","sha1":"0b20363bf6c19ef09bd2df5d678d164252770832","sha256":"b2df3f73e8707220a33b02ab772f89c9ddc5408586ab80c4c4d2d63e70a932d2","sha512":"3aaed96807f70066872d7c343bef68e427a5b815d29b523a3516f17fd89311006b177507255fa2b6e48698046d79e71ddb3f480c7650d62217086c22e05d8110","ssdeep":"12288:bs0H0znu/+yB5WlHS/ThppizFXMwWepeFxTqkprMeiYF5wX:Aid5Wly/ThpKhkjqkprDCX","tlshash":"f6c423ca62510fd1efdad371ec606b0fa7c5067a98bb8f40b75109bfe13b15851836a8","first_seen":"2024-12-12T22:06:57.949811Z","last_seen":"2026-09-23T09:17:53.637145Z","times_seen":3,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":312,"receive":678,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hosting.com.tr/hosting/defaultpage/bg-4.jpg","fqdn":"cdn.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:37.511Z","timestamp":1790155057511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /hosting/defaultpage/bg-4.jpg HTTP/1.1\r\nHost: cdn.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 30 Sep 2026 09:17:37 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Mar 2020 11:40:03 GMT\r\netag: \"8cedd-5e6cc293-e64a2a61f4f75751;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Wed, 23 Sep 2026 09:17:37 GMT\r\nserver: cloudflare\r\nx-powered-by: PleskLin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=2592000\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxJ7cUvN0Xv9zXYBtHuZ1YC7u4BWprhFt3CrI2YrfONPcK1So7Qw0onpySKjSqs6za0AEyCSchMmNV8EAHNZoIWlH%2F78KMKHwNkhea9ffynoKFm4OVu1qciB70JpeitL59Yzkw%3D%3D\"}]}\r\ncf-ray: a3f875159ff2712b-OSL\r\ncontent-length: 577245\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":577245,"size_decoded":578132,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2000x1500, components 3","md5":"5c2e066a737f0d311c67a83b9c928e93","sha1":"a1e28e8bb6edb5bddfbd502ab0421d51262561c5","sha256":"33e9ecaf35ae695696c7daa366496c814a7f4885f7e06060c90661f06f8a7519","sha512":"3b42e766a1e5f281f9d41a1973076025af00c4ca49e2e2fe5cc789a70281c0d079efe46f0bd4292a60207377629877499208e15693e94e40f5b7eb9431ef4472","ssdeep":"12288:PRChNWAk2PBthzXgIlx5xHpLyNKp7CT1GnJ2EwHieV9Eh//C:PAiAk2JbgIlrxJMK2k2Eh3C","tlshash":"dac423782177d69dc3da0af5e6cb61e8255cb8464bd470367ae3c14e08fbd022eca463","first_seen":"2024-12-12T22:06:57.951651Z","last_seen":"2026-09-23T09:17:53.638467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":952,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratemmobile.com/","fqdn":"ratemmobile.com","domain":"ratemmobile.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:17:13.815Z","timestamp":1790155033815,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ratemmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T12:48:34.315886Z","times_seen":18618763,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"ratemmobile.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"ratemmobile.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,300,400,700\u0026subset=latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:17.154Z","timestamp":1790155037154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,300,400,700\u0026subset=latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 23 Sep 2026 09:17:21 GMT\r\ndate: Wed, 23 Sep 2026 09:17:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9324,"size_decoded":1416,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fbc6eec8146dc021a8a43e8971f4e617","sha1":"2e757e2b7b7a24d2bc1d174948a6594264f291c9","sha256":"722ea9871974fa9599ba6da1a46def204679d9ffb2aec54612d7e3efda6efb3b","sha512":"5fb852c97a7baef0a4714369432cde540230845ba7aacc714cde399a1b9845adc06a82f36e3aee748b42c90215b34130c4b62c3ac068ae2c5679e2eac844f735","ssdeep":"192:b7NmxL7NmR7NmA7Nmh3w7NmS7Nm5J7NmjNmxBNmDNmgNmh3wNmWNm5LNmuNmx4N/:bBWLBKBXBUwBzB+B6WX0rU+fwjWWpCUz","tlshash":"65129d92483ba80567830cc563db7f729d9e6151a082d47edbfd2db8acd2d33126075e","first_seen":"2025-09-09T00:49:16.562439Z","last_seen":"2026-09-23T11:14:43.623132Z","times_seen":2308,"resource_available":true,"data":null}},"time_used":4216,"timings":{"blocked":-1,"dns":4037,"connect":48,"send":0,"wait":66,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hosting.com.tr/hosting/defaultpage/all.min.css","fqdn":"cdn.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:17.156Z","timestamp":1790155037156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /hosting/defaultpage/all.min.css HTTP/1.1\r\nHost: cdn.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:17:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 11781\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 29 Sep 2026 16:50:33 GMT\r\nlast-modified: Tue, 25 Feb 2020 13:58:31 GMT\r\netag: \"dc6a-5e552807-ef10de27bfd3706b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: PleskLin\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 59204\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NR68Us7%2FAIXZCfgSO1S3nu3sMXP1u7osIul%2BgCKIXVTTwSPsOTkSpQZ%2Fmakmj2JdbxHu7KMlmT6%2BCEqoYBwPbmsz5RQE3GXGW6NZZsmOC22bJFCkbDo%2FtY%2BwpKL4irubl8LlGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f874977f6156b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":56426,"size_decoded":12717,"mime_type":"text/css","magic":"ASCII text, with very long lines (56243)","md5":"ad0651acb404c1488f71ce281553a6ad","sha1":"66a2ba75582085beba7082bc85ef3429c8e1505a","sha256":"c86d967cf4c13623f50c3d35e63c31c147d025d7e01c7761051be9745b6871c1","sha512":"742d06e47300ea12ebfc4d5333adb744deaa2beb0bf2ccf9bc1f9473af09edc0689faf1b31f29cbdb920e8eaa57c61e8d67326702c4ee408a79d14c38566d6b0","ssdeep":"768:V6C31sPizPq4/vBUAUHJUkQdR/WMQyYJrX75CsmZQzV:V6TPUC4/pMHGBdcfd7ssjJ","tlshash":"a5430bb8e54d41c9a731c44fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c5fba","first_seen":"2023-04-06T18:44:29Z","last_seen":"2026-09-23T09:17:53.64134Z","times_seen":79,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":98,"connect":34,"send":0,"wait":112,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:21.428Z","timestamp":1790155041428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://ratemmobile.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:42 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:04:11 GMT\r\ncontent-type: font/woff2\r\nage: 149023\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34236,"size_decoded":35049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34236, version 1.0","md5":"fee1dc1edf94921126077c4a0034eadc","sha1":"427949faee52b0848aacce8dde79939e4956c3d3","sha256":"50cf7d32c18e1001749b51f1565ef745bc0687b0297b2b13465ed577cc20a8ff","sha512":"ee1a28f6b6f05df9913a7c9a6e006c4728a2d818afc3c3cce2c99dc51c71436ea415eee46b6dd82e83cbfad52713d078878ee92be1db8db3d132c7d631119c13","ssdeep":"768:yJ4irnFQpWzt8cJdyBSWj2rXnX+GyOMPyr8lWpreMqDGfP2/rTJa:ydrnFQOBJ8Bz2rH+lKYlWJtqXa","tlshash":"71f2e19d0b61d12382642aa3f409501f1f47b5c800efdf6bb05d54351caa25b6eabefd","first_seen":"2025-06-02T17:58:00.99575Z","last_seen":"2026-09-23T11:59:35.063217Z","times_seen":21578,"resource_available":false,"data":null}},"time_used":4343,"timings":{"blocked":0,"dns":4037,"connect":160,"send":0,"wait":49,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hosting.com.tr/hosting/defaultpage/bg-2.jpg","fqdn":"cdn.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ratemmobile.com/","date":"2026-09-23T09:17:23.934Z","timestamp":1790155043934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /hosting/defaultpage/bg-2.jpg HTTP/1.1\r\nHost: cdn.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ratemmobile.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 30 Sep 2026 09:17:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Mar 2020 11:39:50 GMT\r\netag: \"6fb5d-5e6cc286-bda1f32c411380b;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Wed, 23 Sep 2026 09:17:24 GMT\r\nserver: cloudflare\r\nx-powered-by: PleskLin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=2592000\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqwIXy9BxsaIGqAbglSGVoWyfK1Y9Lwc6z%2FbfBKeRZtal8IUTZDDEJENFOMcMcHe9f4r%2BLaobU6s2ezcAEJl3A%2BcNib72kG5MzN70k2mEvS9WG4f8pJ61YVctrpL4OxelBMJrQ%3D%3D\"}]}\r\ncf-ray: a3f874c0befc712b-OSL\r\ncontent-length: 457565\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":457565,"size_decoded":458455,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2000x1500, components 3","md5":"aa254047e845c745f7e0c79d31977a65","sha1":"afa8faf3b0373fc8a1972423830c603cade80e9b","sha256":"c215317debe9dd55ef38fd7ffd3d408eb0e38593bf96701c78d8d753bbf416f6","sha512":"c6807f204e0c01ac376cd9ee0098fbe673ee1516753bdddcaa7e78d6ab786b056cb39481a8b5dd8d2bb4fef10835650369fdfdb6060cdaa4d590a46793232c84","ssdeep":"12288:Y1oL2Frh1CGR/75llZL8grCr5DJk43HfLjmNkWQt:Y1mO1BllV8gurlC43HjNt","tlshash":"2ea42393576b0856e22594fc075036e31815cf8a3ca6b3d8f556ced4132cedbba608f8","first_seen":"2024-12-12T22:06:57.948365Z","last_seen":"2026-09-23T09:17:53.643221Z","times_seen":3,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":564,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}