{"report_id":"2c392923-7d39-4c24-a66e-e0cd3c0ccc4d","version":0,"status":"done","tags":[],"date":"2026-10-10T22:22:27Z","url":{"schema":"http","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":0,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"title":"Anasayfa - Ferat otogaz - Şanlıurfa LPG Servisi","dom":{"size":182725,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56203)","md5":"d9f0f26ae445cd0abd6f001767246c96","sha1":"ca80d57e294e0fe85674b8a308f821477e7e597d","sha256":"67e75e476d16de0cba2d69003f4343dcb5e6d863513cecef37dae57ac06d7337","sha512":"21e1cf11b5d959687cb71355dd9c1961b0e6c41e6ac894a091e5ee92fce496b825f04fa2bfe64f3e3a41ae9519142e046446264ef014ccb3153a3fd78c2abf64","ssdeep":"3072:cp76js80ndARP9Cr52Y8J7SB3WWjwGHQl9xri3Ru75:W7/ARP9Cdg7","tlshash":"fe040870bb50193a313b43bef15bb61c50aada63d60d66e5f4fe801895e5fe2307221e","dom_hash":"domhash6a6c5ca06cc44bf4fbec7b06948dfa28","first_seen":"2026-10-10T22:22:36.271123Z","last_seen":"2026-10-10T22:22:36.271123Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":0,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T22:22:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"feratotogaz.com","ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":128,"request_count":64,"received_data":1875583,"sent_data":33239,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":4,"received_data":143281,"sent_data":2386,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":12,"received_data":458360,"sent_data":6905,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-10-05T15:47:17.187021Z","alert_count":0,"request_count":3,"received_data":5324,"sent_data":1676,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-10-05T23:51:00.733113Z","alert_count":0,"request_count":1,"received_data":4577,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"feratotogaz.com/starter-templates-zip-preview-js-extra","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"76fe04e7eded4191a2ec405c568bf21a","sha1":"4f9ac2ebc8a0058e5e01e1e365406769410a78ff","sha256":"e2f2e1eefd7e2fab9557db26949c9778c05383b9b415ea4853b4c92353d0b646","sha512":"e09547c19930f82d12bcd0b5c64fe4d35522331669651824e3c334fca361096562676267f6b4291a183dc18ca80d7c6d67c91a53727dc71f10a2ce90dc1f40ca","ssdeep":"","tlshash":"4b319224f27419b2057389bdc51fc2a8949d6a43cd2ed709bd5dd96c21e675f0914703","size":1636,"data":"","first_seen":"2026-01-28T06:06:48.29885Z","last_seen":"2026-10-10T22:22:36.389082Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=09382f635556bec359b3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6e64218d897c667223b9729d964464f","sha1":"298e350fbb69196edb071a2023e2a045c8528253","sha256":"a78ffc057526aa84675d2eb5519424156f7d9ba3b601704f606b2e676b5615e7","sha512":"519f27265b2f723b0acf9e7cf6682b73f0ecaeded75562d7d9b1f185f2331ff7a7bbbe2c11f9093ab1e38b16d1a78b77bafc677569f061f906380cb459e923d5","ssdeep":"192:tXCj6CnyYlqqOre482UO7N1gqts1SIVje5L1Cd+eLXPMo56MxdC:u6CyYlq/i482UO7NW1vV65AxrUowMxdC","tlshash":"5ed1b63a3224d9340bba4aefb978e3d4f424b519b90792e4c99ccf0924b5d43139876a","size":6587,"data":"","first_seen":"2025-12-08T16:51:03.59113Z","last_seen":"2026-10-11T17:52:15.581474Z","times_seen":10250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/jquery-ui-core-js-before","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ee39a449584d95786ee8b58a37365bf","sha1":"025ab93c245684d40e1ef8f665c9c21d4f5f0287","sha256":"06514500b55db07a82f2a21a0355c4dc674420a219ca6b894134f3f9d2d0dea5","sha512":"884b4aa4c9fe157817d8d43324a11ae00a25aa701d6ead3642eaa1ba08a53e08b8b8630690a68061fd944e728581b213bd7f774cf3046188fa0dc200d61c62a7","ssdeep":"","tlshash":"c22111cae2e02028b0b008b28ea00288b02ab2a8e2b200a8b80a080808308008002a0a","size":1348,"data":"","first_seen":"2026-08-24T05:27:33.814109Z","last_seen":"2026-10-10T22:22:36.391414Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/api-fetch.min.js?ver=6f2a4faeee3c722b1e57","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9b363356234d2dc4e987c26183f36b","sha1":"c86390e7e5f8baf9f290c1ef04f944ce2c4ff248","sha256":"406b522aeb10dbf49dfa792b47fad4be37ef959bd77f48506e51cb90fd440ed7","sha512":"5d401c720aade7634f47a0f074b55c7503449f557954b99b2bc7b2374ff6299d347b106fd22614dacfb55622659f9b9b07aed70427f2fe71edb4db7605587631","ssdeep":"192:zpdeCYk0oG7T2KDPyB0V/Sr6cXw6Dzz+IjQFu:uCytqB05Sr6cw6b+8T","tlshash":"f3f10ae43ac3f2a7537e47dce4be4461fa8a64ac845cd410f2d4d82961e4846c4a7fb6","size":7510,"data":"","first_seen":"2026-08-19T23:17:42.225489Z","last_seen":"2026-10-11T18:03:48.471261Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/build/formSubmit.js?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c217e99b826e8e6b597de59f26825ca","sha1":"29536ce9191aed00346c5a46da6554c3b18bf50b","sha256":"0948e8e4b2d8c8ef194fa85468a1631579e2fac7fb04abaa4e89c936713476d1","sha512":"817cdc737e05508cd50a2250c5a2ea78db88f75c254ede96ec9a9f507943dbb700d566b435cb06691d1350369d599f3340750a4d1e75ab75313b222b1f7c8756","ssdeep":"1536:FQtvhWgeL18fx+yT5BIcKXftR215A1tRjMvHx:wzc18QyocKXL21yyHx","tlshash":"0053fadcf3d7f0b616b3a172d06f1057e2353a1aa84854509615ccd2b8ad9cba233fb9","size":61584,"data":"","first_seen":"2026-02-19T09:28:21.447237Z","last_seen":"2026-10-10T22:22:36.367342Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/js/minified/frontend.min.js?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5424e3f55e5ce8043049f044c33e689","sha1":"40dd54a958610f3a0f507eb134b65a585822c4d7","sha256":"d46938a0885d8503fc1cc4ff926f410715200845f340f02317b7695c923acd0b","sha512":"2f91402c81145ad4f0cd020707df2f41f2c65a10f3988b68acda6d8fe9f03a12f706063e17842d72037ca9f8cfabc797ae67aae5d98df1f733a5940c40b443fd","ssdeep":"96:ZgOcwJyTi20xB030FyixMDtoMiLoMo5oMvhoMhax7OyA7Me0AzOsAr4y6BRasEZT:eOc0yTiTxaEFykMDtotLoT5o2hoMax7X","tlshash":"c4b1da64b7a16436597f01ff32ee22e2fc71c58a790d59843018c8a9771ddf28580fe9","size":5126,"data":"","first_seen":"2025-11-21T08:32:24.620687Z","last_seen":"2026-10-10T22:22:36.316257Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/wp-emoji-release.min.js?ver=6b7b0d1f837ef9fdc60f88a22382a125","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T18:43:52.903166Z","times_seen":81729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc8c461e7d2b769809bf9450ddc05ad9","sha1":"9915c3ca2363b0bfb9fb3f8321c61cd9510378c2","sha256":"daeab5c58fa067fefdffb6cb3de538a000f3b5709050af15fd53821edb914ca5","sha512":"cffba4d02bf66727a3fdd718b2e4992e9c2dff72b9f21c426c13a0193029054a124df2b2c0378f4630dde0afa50dfdd19be6b683b6a9c2e34a3842d6baed0806","ssdeep":"","tlshash":"55b092b502e0952705ba055ba8a7e209646098216ab7b168811cc32c8872ac01da1bcd","size":117,"data":"","first_seen":"2026-01-07T08:46:29.706945Z","last_seen":"2026-10-11T15:19:48.006853Z","times_seen":881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2bd525519a270dd43aa2a611db71d7a","sha1":"10c2ff71f42a5f72a0e294401ac75274895d780a","sha256":"a50d222770e1a4e0cfbe39fbf32b86ca84056c1c50955f9acc32f272471603e7","sha512":"eb6722d2db2d08772663e5cf497ffe68f66268d3749ce7b0246efaf9992177a9e33ee2105d2fd7e6768b0f9a0210006076a022c93dd23fb0a35aec1d142ecb76","ssdeep":"","tlshash":"1b01cb2cf084201485f77039d0bfb797b6137c766a2b00cb828c88b82e2cb388d639c5","size":703,"data":"","first_seen":"2025-12-04T06:42:53.028662Z","last_seen":"2026-10-11T19:11:44.608289Z","times_seen":8098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-10-11T18:18:08.038846Z","times_seen":45935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d187da886ac3cb95b1bd2c5089f568a","sha1":"d416bb5055f47118ec3acec793935fcbb358f7dd","sha256":"5c93c5e5e7c785c736acdd6ee8dcc71103bbbb2b6b8023dc0f7cc71c3f2ae1e7","sha512":"84c78292ef012429b40e5289d54aa075a2dcd4a8372a4a03923830ffabb76979e1acec362ed99e6678e9d15efa2d73f20ecc9e57617f5fe990c9d666d95ff34a","ssdeep":"","tlshash":"c7d0a71402d11d0176db0c6250108f64f0f9d080c1d9f0d8da7c4d4862e6a1a176810d","size":218,"data":"","first_seen":"2026-03-19T05:46:41.072072Z","last_seen":"2026-10-11T19:18:45.703731Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"400d3eeba1fc3b8b3d13220a007a7edf","sha1":"ea09b78860da7c3b799dbc43bca9cfc4d74147e2","sha256":"3ce068e7456da79b02d440d3ce9c2978219cbfa72a6cdf5ca76e45dd97fd8461","sha512":"c86384cd90eb721c3eb6844738cd4f13b782e785c0196bbba6d222cfad0d8c56360e05d5df2cb0b36aa9dab9d1fefec701dce90b6e7969fe4e22c4d91ac0d204","ssdeep":"","tlshash":"e1e09224f27419b2057345bdc51fc2a8949d6a434d2ed709bd5dd96c21e675f0914703","size":361,"data":"","first_seen":"2025-12-27T13:42:05.725988Z","last_seen":"2026-10-11T19:04:17.712533Z","times_seen":3876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fad6a0464fd99becdd9a48d606ca8e3","sha1":"d7b2bc83adee89a0638ed4d1a63f7c8ae83506fb","sha256":"74ffaf131bafa8bbc4958480d1fd49ebb8be8fb4c9a21b44469762063f860bf0","sha512":"2afc27ed04c0c13d9f4af4515a34ccee027615040a5bdc7bcc2cde23de3d6e97a659933324353e7a055f8f1de1a95e2f9df770b3826fe235baf5c5eb1fae0a7b","ssdeep":"","tlshash":"e0a002dba2e4616cf4b10cd28ea503cdb16bf2f5d27214a8bd4718481930d519152e4a","size":66,"data":"","first_seen":"2026-08-08T12:00:35.269099Z","last_seen":"2026-10-11T18:41:37.604614Z","times_seen":16956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"826e8c63be21cc33d7f5a6905b5425cf","sha1":"bd65f475856c7e36b546f26fea9e12b5eab5f030","sha256":"8e3e2ddfbda048a85d65e532c52f5ec7ed9fd718df68cb91aeaab401507a6ed7","sha512":"14e16fb9dda9aa96ada14696225fe82891078116b3d58f916fa3347c69a450b420fe0f1c92dfa4532a2412ceb8dd9b0782b5147f5fb4c5dd90598b9fc0b3b4a9","ssdeep":"","tlshash":"0451c83539882abf43a3cb507d37bb2ba83c052680407ce5f4f9496415b66b52207d27","size":2739,"data":"","first_seen":"2026-10-10T22:22:36.404293Z","last_seen":"2026-10-10T22:22:36.404293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-10-11T18:42:12.374809Z","times_seen":74980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ba5cadda622b4b92668be59c1157328","sha1":"abd6d2e1ef6af4e05f23ac6f28a932b576e7fb49","sha256":"767dabce4a91683f620c7a33dfd4169ace4fb6accf93d2a5f9274fe8d98f4f8e","sha512":"6b734cf47a33c0c691c4f1ff49a465cea427caecd79ee9e12fe89cd7766f7d9a255a50e49cf08a940dcae1e6525b9edc201c9cb7da35d91617110a0146c38546","ssdeep":"","tlshash":"5321354d3df4a62d849602c9dd7b2b4dd4ade11103b6ec45b539480b9e31a1cf1f7e88","size":1221,"data":"","first_seen":"2026-10-05T05:44:45.706234Z","last_seen":"2026-10-11T18:03:49.31749Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0f1ab1580473b884fe32716e9de6213","sha1":"56f9f103c2bc163ba73f482d714c65849318e428","sha256":"ee160000ead3801dd692df2d686c2b53b4a919114a5d905ac4891ffabc92e0ca","sha512":"ac60ec7b1d7b1f5d22cec8ff48bed8a62b40d61bf288db4aa8c0bb16c718f40130785059c08de3e6eb916f8f62d32c13a12ee1951f66fd66c12e1387b1cfa2ed","ssdeep":"","tlshash":"b0e0e5fd34840f0b5419aa4443f90335aeb08cccaeb6c20059a7be4451c58c1bc58052","size":409,"data":"","first_seen":"2026-10-10T22:22:36.408305Z","last_seen":"2026-10-10T22:22:36.408305Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc51b76818615435d1d527b07b2b2bfe","sha1":"d918e62f8a78fc1efbf0a8d9f1deebd0fc3e08b7","sha256":"f1e0f68bf6ea08e26c9c802ca19bdd24e9b3306760caa6f5ac0addcba3e90196","sha512":"da8a564d27d1f04bd2a4d18f32a4d984eab0700b0ff750b0d07f6dd63924b274bac11f9f4a7db70e0b7293108c0a92e751f0576a390c6685ddb37ef98201b591","ssdeep":"","tlshash":"9c11bb1ae8c927b72b4b839177d761b01ce180d8ed1154ca14bd643845ebdec6a1738e","size":1084,"data":"","first_seen":"2026-10-10T22:22:36.410199Z","last_seen":"2026-10-10T22:22:36.410199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-10-11T18:21:34.330895Z","times_seen":27496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/astra-theme-js-js-extra","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fdc164f55f0f8d204ee9b23246bb325","sha1":"bab31ec832227f4b5607cb86773d2e00413d5935","sha256":"45cb5f9e5c100f9a872550a4b34c0859e08efd486bf0d2a4900237f545bcc4dd","sha512":"d7d9ff059251a4269cda4312e0fac72e85fd36170b8123a3d8299e7968af2fb84e7b5388155ee5f8329a0a104486169352cf2ffa3980f47d45f7610f0f664d0b","ssdeep":"","tlshash":"1d31a714c2d11d01b6db0c7250108f64f0f9d080c1d9f0d8da7c4d4862e6a1a176810d","size":1487,"data":"","first_seen":"2026-10-10T22:22:36.418985Z","last_seen":"2026-10-10T22:22:36.418985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","size":25965,"data":"","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-10-11T18:58:12.876557Z","times_seen":21599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50503,"data":"","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-10-11T18:04:43.540248Z","times_seen":31532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-10-11T18:45:12.695752Z","times_seen":27143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-10-11T18:45:12.611922Z","times_seen":26702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/private-apis.min.js?ver=eb85f28c4c729bb4f002","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"686c8c2f8a22c5626d7b5f6d7e375434","sha1":"5f7c67bea56fab4122c779f4d30737d2f838ee54","sha256":"9d3faf45132832c5c02589ff5f8d0bfb79843c8e9645ecf8ee39fd0924d17509","sha512":"2b3332c53fbee7db6e4146994b39a67703057aa2a83254ee991bb29da54b1a44b35b38d92b8410a6defe67387ce53d0c105cea274a7b202bbeb6b67b32b293c5","ssdeep":"","tlshash":"fa51717ab3a86ba50de61035a8c96111bec04437332c5531da8ff0b92f800b3cd69eb6","size":3017,"data":"","first_seen":"2026-08-19T23:17:42.211431Z","last_seen":"2026-10-11T18:30:59.110698Z","times_seen":1885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/srfm-form-submit-js-extra","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81c8728a1d6c3b3840be03fa3822d07","sha1":"bdd715be2378c7cab51ac8ae3dbc345c70ba9803","sha256":"ab47ba4d97e596b8c8d860170acfb97b58b8509789864629c85e4b736ae552d4","sha512":"ad5e5cbf9e70dc9d44db4bda8bfe14078a5848b873deab94fae28677965efa41ee56cf2bd2bcf1b11b060705e2013d00f761d21642011bef3ccbb5734a81fa49","ssdeep":"","tlshash":"5341bb1ae8c927b72b4b83b177d761b11ce180d8ed1154ca14bd643845ebdec6a1738e","size":2401,"data":"","first_seen":"2026-10-10T22:22:36.421095Z","last_seen":"2026-10-10T22:22:36.421095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/jquery/ui/core.min.js?ver=1.14.2","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffb9792c762c28c883fbda04cb87bfd7","sha1":"1d142a621d684714fd78aa415b1d13adca03fd13","sha256":"b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7","sha512":"5605218f2ca25c9bbd553aef21adcdab3819eb7a5ce0081a411d3ca82b26bffa129b8aa7013f6d18f933fc9e526380e1b92da6c87938eb3cfa660a05b3a7a98e","ssdeep":"384:379nP8FkFv28i8WVVnh5GX0Ci+Q8LMSAQT/hSd:9P4k0vfSA4g","tlshash":"4a82e64db2467851c6e7a1a5102f520fb132a59cf00ac89ef47ccde93c7aa996073f79","size":18674,"data":"","first_seen":"2026-08-08T12:00:35.066846Z","last_seen":"2026-10-11T18:45:12.648034Z","times_seen":20038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-i18n-js-after","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c36d4195f7849190fa8ac65678e5b506","sha1":"bfe03d32e7bfe7874490b6924e55529f701771c4","sha256":"86c43902c8cb9ed359edfbe81037d7c3d8766e697c991b55693e0438c5a210f4","sha512":"78750b2170107ee4317bbb8593a92f03758ea367ca398a5fce905d7b8deec1d8f0eb6ac09972ea58cdf655cb0061a45431a9f1bccf18329050752f210c57acb0","ssdeep":"","tlshash":"682112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1391,"data":"","first_seen":"2025-12-04T23:23:05.080006Z","last_seen":"2026-10-10T22:22:36.423474Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-api-fetch-js-translations","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bede3faec26d467c9e097651521efd79","sha1":"b42288244c427cf3d0eca982f6d6bc18cb89f6cb","sha256":"3d99d22795f51c8cbd891d99251443d518ca2118a8917fdee77c3ac9f26a8d74","sha512":"534b854a6ceda620953c033e8b2a3b5abe547545403cd235f0dcebbfb15674c8e9d049fa6cf136a9a4dd85bd26ed0f8de8f66c65c68f045c06b9c96505a782a4","ssdeep":"","tlshash":"5d51534dfdf4952d849201f5dd362b4cd4ade001c3b5ec45b538480a8e21a1ca1f3e88","size":2521,"data":"","first_seen":"2026-10-10T22:22:36.425713Z","last_seen":"2026-10-10T22:22:36.425713Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/js/minified/blocks/number.min.js?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d668a0e9c0daf30d4f6a9b5149fa6c9d","sha1":"9e7f78213ec91bf1c4fa1f51bef6b74c7ccdea3f","sha256":"9eb95a8faef1f78c5f75bcab0f212fd85782a263ff8c803350e643f2cbecfead","sha512":"01d766ac6938f504f9a67dce72b714e9b599d4326efee61c099e0374e00c9559ac14c5f9cb3682dc18df8dab1877006af9c9f4a75a18674f515bbc839ef1f394","ssdeep":"","tlshash":"35310468b3045db363f99bb1a1d9a252161519d9cc8480b00831dc491d5fed193b6ff9","size":1785,"data":"","first_seen":"2025-11-10T18:32:18.193242Z","last_seen":"2026-10-10T22:22:36.303035Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/astra-flexibility-js-after","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8403ba816b7c8c1e39b5e88fc815af0","sha1":"19716056e21168e889d51098d7b104e64688d022","sha256":"5240161a8ba626e0b7a8f6bd23a28a4e425c3a5f7ff30220e3cde341f8e3b94c","sha512":"00867cdf64804bb26b84963f70fc4db9f826a24300222e659cf9bbc8fa27bf9ea1c104d45d92b596645f879af5245243009c732907ca96195fe5554fdc65aa5c","ssdeep":"","tlshash":"e0d092b5c2e0a52705bb097ba8e7e60964609821eab7b168811cc32c8872ac01da1bcd","size":229,"data":"","first_seen":"2026-01-09T13:24:19.869379Z","last_seen":"2026-10-10T22:22:36.428406Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","size":5677,"data":"","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-10-11T17:52:19.431556Z","times_seen":13526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/dom-ready.min.js?ver=3fe927cab37bf38d6a23","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e905912e68f450e58ff87827d799840","sha1":"fc2ca5b65017b078702664499ac86ef714e2183e","sha256":"99aaf7045a5c801db73f65f4108f8ef0893178c0fb726b70d986641845588ec1","sha512":"2796a6867cfea02aa5056a26d65c3ae6630ee098c466521f51b8a60ce3aca2a37086b0757bf084313f9f0d73c1533998940cbf0d4d872717ead31a782a1f5fbb","ssdeep":"","tlshash":"761100a62dcaee3145dd55c6823d6380f628687c1669b0d0a39cc4b8d9e840b01bdebb","size":881,"data":"","first_seen":"2026-08-12T14:43:17.725391Z","last_seen":"2026-10-11T19:05:42.241367Z","times_seen":5713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"94fb09aa1d269a77e1342c65287f157e","sha1":"f9db572993c4380dc12dd1f693d97c1506535dbb","sha256":"1c7393de461eba58372da88d16bd575203ffa822493cba7a28391b96f7dc4cee","sha512":"c7624cf54626a7185d67cbbf964b1ec0df91a9a0b1def1444b220df105bc604ff9ce88cf60f9277e7fa47ee69ea42a24ed544deb105c0ca358be3801ec89265e","ssdeep":"96:grsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJC:0s7NAME0+eWjQvJB5","tlshash":"4d918659eb7538df33fa01f2653a4d47eb614436e784d038c9ae631424b1893c375a5a","size":4384,"data":"","first_seen":"2026-10-10T22:22:36.430847Z","last_seen":"2026-10-10T22:22:36.430847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","size":15073,"data":"","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-10-11T18:47:46.925574Z","times_seen":80641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/elementor-frontend-js-before","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d23a41ab214c39dd7b2fdbb552d3c5dc","sha1":"a41ee8f21556fb6fa15b7ba7221bfcdca4937873","sha256":"050dbc380bf7e229b18e3582bd47a3988e68a87af52ed6d01b820fed89eb18f3","sha512":"325799cb44797a75ea17b6c848ced9cf11c12e7ea75532d61c36875a5e2e6d32ff85b30608ed38e1e28cc3bf9f6ae1e44fa8275e6f6b717deb8a8895e6961e55","ssdeep":"","tlshash":"0481b735f9882abf43a3cb707d36bb2ba83c0526c04078e5f4f9896415b66b52207d27","size":4026,"data":"","first_seen":"2026-10-10T22:22:36.433196Z","last_seen":"2026-10-10T22:22:36.433196Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-10-11T17:55:22.813526Z","times_seen":72216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/url.min.js?ver=7b0de086d4ae11d55704","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"356029f3e2535da4fef4deb11b02bd1c","sha1":"6967078d7562cde4d737c6c5efdef968deb99cee","sha256":"e24b520879af3493fc9cafb551136ee37ab119d73bd5608d86899e23121e004f","sha512":"4be0d6d9f3a845cfd607d4c10a799ad14695737c8e68f23d0d54ae0396a0ed6c40f73464439898bb95fd1a6bb26a4a7fd62c8f62b157669d4ea54a38aca907a1","ssdeep":"192:jNkT4xiQTYTXgGh1SZAp4N3z2E3OtSAw1NNvgzjsJLunYTAxinbZhX5:jO/QTwgKi64d2GOtg/4jsJCnKJnTX5","tlshash":"e62221dd32b320c69fb65d50dd75d1daa17b0fb1046a00449bbf79d02a221ace383a7b","size":10423,"data":"","first_seen":"2026-08-19T23:17:42.140933Z","last_seen":"2026-10-11T18:29:10.822931Z","times_seen":1955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-10-11T18:45:12.655408Z","times_seen":143697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","size":15525,"data":"","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-10-11T18:58:12.79417Z","times_seen":18226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/jquery-js-after","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fc57490c92071a0f4a7acc3c4f291d9","sha1":"1fc485d5655af75edda7f82b0fec87541dec10e4","sha256":"2fb59a324e3250ddf96c4c4e94505e862c6c593584cbb00cc21b0ff26be3e390","sha512":"da7a278bb5e101107952b2785a1790d6ddeb43ae174c0333c48a97ab3e927e064f1ba26dcb6aa14ee7211545fbf60d437fc358072380cd5a99a04511b8cb7637","ssdeep":"","tlshash":"79019c1cf044101445f7703990bf7756b6137876e62b0086428c88b82e2cb388d63985","size":822,"data":"","first_seen":"2025-12-03T19:22:36.941736Z","last_seen":"2026-10-10T22:22:36.434984Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-api-fetch-js-after","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dd0f7ea4ffa50f2700995eaca355918","sha1":"de346c5e5ba5763ed8edfd55b09ea017428f6d82","sha256":"0e9c3b430f17e095c79d181ccccfe826b0589bad1d9a04b681b690dd26e6fdab","sha512":"9f065a797df2c4c40ad2d1124e14922dc327aad967b675075d647320259e2e23a6999b01b4e7a7e7f8d53a9d53b6f2542b71c778e30e09cbbd0a7b836cbcdf97","ssdeep":"","tlshash":"8d31e5fdf4840f0b5419aa7483f90335aef08ccceeb6d20059a7be4451c58c1bc58052","size":1718,"data":"","first_seen":"2026-10-10T22:22:36.436282Z","last_seen":"2026-10-10T22:22:36.436282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/js/minified/blocks/input.min.js?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a89230753e35ca6506a99f2210509bd2","sha1":"99a69ca496f3c670600bdf61c6c7054c14beb609","sha256":"9d8f6a989463ef2efef6d313bc81b13fff635e9b38220ac11783c51af458fd99","sha512":"23dd0ee9bef87b5a2b00951f4bb660d035d67095d93655b22b8591fd116ad0595a36166cd42ebfc8cd0e403c19408f93f32fa8e1d1e645fc41d00f01c4692ad0","ssdeep":"","tlshash":"a2118062022c1bf729a5d1f861e5b4460f90d36227a289637079da5bccf4ccf0b75da2","size":870,"data":"","first_seen":"2025-12-21T02:34:12.89965Z","last_seen":"2026-10-11T17:52:15.764385Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-10-11T18:45:12.579555Z","times_seen":169156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T18:43:52.943547Z","times_seen":1101147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T18:43:52.979514Z","times_seen":1005199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://feratotogaz.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"warn","text":"Nonces refreshed:","filename":"https://feratotogaz.com/wp-content/plugins/sureforms/assets/build/formSubmit.js?ver=2.5.1","line_number":2,"column_number":48624}]},"http":[{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/css/minified/deps/intl/intlTelInput.min.css?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.042Z","timestamp":1791670909042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/css/minified/deps/intl/intlTelInput.min.css?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-4aae\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":19118,"size_decoded":3375,"mime_type":"text/css","magic":"ASCII text","md5":"497de9483d6dd24623f23a7abeffe0b4","sha1":"c1b57e1fde0d5921ee4022ecc2c07ec2d902de3c","sha256":"d8c826e966d6e45656ed84e8b6ff111eb21622039affdf3c3f125a756c23adcc","sha512":"ac1403d5024fd798478965e8552436577dd96059b9a55264fb84333bafb619cf1b74cf840c7d654e36c907aa044cc54a70f1b529e93639ab5649500814fc74ea","ssdeep":"192:mBhnOYT9uacsc0sfAfa5p5eEZkn9D88Dq5uv5IiaqNDjW3bkHRaE9hHMx8xJ:YhrFcscE37naWJNvW3bqf","tlshash":"7f824f5b51e5247ebe1de1be39e640b6333b940fb09aec9677c41029cf466d088eaf40","first_seen":"2025-02-11T07:12:28.674414Z","last_seen":"2026-10-11T17:52:15.64918Z","times_seen":617,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.046Z","timestamp":1791670909046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f05-13f6\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":5110,"size_decoded":1457,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110), with no line terminators","md5":"d026a17938c5380cc610572fdda43f40","sha1":"2b5df61e56b7fe1dfb88f1707d4b017909b02a75","sha256":"91079644ee1e76145b30c207470b56866770b0564f0fbf1373ab8b11d94f8c9f","sha512":"00dd387f3726c15e71f2f7379c4fd3bdef41c2d81d73f22f3212991b4d18d4b663ae89906722fd9e188606c1061f3f8b5472deee2cd514680e64a29f8193cd66","ssdeep":"48:FDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:5oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"e5b17651be4f9586321f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-28T14:24:31.329664Z","last_seen":"2026-10-11T18:41:37.299857Z","times_seen":91081,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400|Roboto:700\u0026display=fallback\u0026ver=4.12.3","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.015Z","timestamp":1791670909015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Open+Sans:400|Roboto:700\u0026display=fallback\u0026ver=4.12.3 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Oct 2026 22:21:49 GMT\r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11977,"size_decoded":2466,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1566)","md5":"9f0a22ba2d6f25eea02a28ccd3de24bc","sha1":"703e9b1d70767d359cd7f45b4f43fea0233eff3f","sha256":"a57b991304888727528008a2139ecd307a911e86439ce65ae0f435bf085ee19f","sha512":"7e09bdd1466ca4eedbebb9663e1379a8b6533272ae5a514fb888cf5050253aff1d5812260369a48d5265e60948c7099a468c654a230a9a6e177adffbca9932c4","ssdeep":"192:P9fhj+FSHN+8C8qGIwQO0lRgN1SNUN9NFsNF+/NP8qGIwQ5N1Nj8NI:1BY0qhq1IyTsMV0qhf72I","tlshash":"58322c9004174440ab435ce727cebf35fe1f92206044d0aaabfd8b5aeddadaa637435d","first_seen":"2026-10-10T22:22:36.278215Z","last_seen":"2026-10-10T22:22:36.278215Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":10,"connect":17,"send":0,"wait":33,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/css/minified/deps/tom-select.css?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.041Z","timestamp":1791670909041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/css/minified/deps/tom-select.css?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-1dbc\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":7612,"size_decoded":2280,"mime_type":"text/css","magic":"ASCII text, with very long lines (7612), with no line terminators","md5":"43b399ffdb63c6211e97ba565aee803c","sha1":"9ae40d21dcec7e891ccc1598310aabd9e08b748d","sha256":"3d26654ef81b1010c929003f0f9401b9f0de84e1f156ec30156569b3ec7aa7e0","sha512":"28e31cacf5a78a4c6e12d75439a51527414875504c7d9749279e2b481e27a35aa384465c68631228ba3039c41fd2005f187a2f711969661b0616ff3f4aea9bdb","ssdeep":"96:Mf6zz+kVhBX45AM4ElMWb77SYmzPHTFbuRgFg3VO4GKgCtonA9RxvEweceX:MC/+kVoKMbXRRX3VO4GKiPcY","tlshash":"a2f173a1faf8321138f2d12c6ad0979f142bc269e152c56fb4767629abc91c70577f0c","first_seen":"2025-04-17T03:37:24.412259Z","last_seen":"2026-10-11T17:52:15.590568Z","times_seen":595,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.056Z","timestamp":1791670909056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-29d\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":669,"size_decoded":622,"mime_type":"text/css","magic":"ASCII text, with very long lines (483)","md5":"9eb2d3c87feb6bb2ffa63b70532b1477","sha1":"38f226335a05ab0e30497bc7419eb5e243a9e26c","sha256":"37bab6cd583982e8eff58501a99d7c5c4d63664c1ca34f9e3b7cf526c5b73ae2","sha512":"8d0ab38f6bc757103fc82a234fca5566328639ef549a862f9ceb8cff6b10d75d2fc626a3054fb85a4c91b3538332677801f9edc14115e09f957cce8391f8cb46","ssdeep":"","tlshash":"ce01f96e4646194141c10f1138d9fa5ded46f0a97c582f33a12adc2d8cf9e5f21b9f19","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-10-11T18:43:52.83544Z","times_seen":116132,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.057Z","timestamp":1791670909057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-2a5\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":677,"size_decoded":621,"mime_type":"text/css","magic":"ASCII text, with very long lines (491)","md5":"3eef8c9e589a6fd58292e79bbac4ba5d","sha1":"d3ebdb629b8d9c92380b14b1676b123398f0841b","sha256":"eea3d6ccda7f6503078cce9dc41176c1357af1c93a5b3625131ef7cf21c9d7c4","sha512":"36a72de0983c898c0546cfc2df8863005e688391ce344da6aeb515d49654b3007e614eef6123f222318cabe1004180e63ac32e3bd54884aa5151aec68d129596","ssdeep":"","tlshash":"770170b94795004541910a0038e97b19bd4ad46cbcea7e63e61ade2d0cfa91b11d4f08","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-10-11T18:33:11.225078Z","times_seen":50021,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.073Z","timestamp":1791670909073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f06-c547\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":50503,"size_decoded":16479,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50502), with no line terminators","md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-10-11T18:04:43.540248Z","times_seen":31532,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmaiArmlw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.920Z","timestamp":1791670909920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmaiArmlw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15196\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:06:29 GMT\r\nexpires: Tue, 05 Oct 2027 16:06:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454520\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15196,"size_decoded":16009,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15196, version 1.0","md5":"57ef729e27c025dd01949ee5a2ba0151","sha1":"0c348a285766b5692ef5e45cdf2861b71970f6bd","sha256":"7673803a2d402018b1f726dded5bf2dbf2be4307039e8718f4bea654d6eca249","sha512":"6df4001f7417f37a2b0da4ea1d2a617a0e0b5942d45a54b6b872b8ead0445b129b2b5e2957452167e01f1a06c45669dd915b0975a4cebb6b180c543dcba0d586","ssdeep":"384:kldtGlOl7s+WfRYMYB5YS7+eAWZNXmH2tzrcF:SwOlyfRyB5xFTN2Wtze","tlshash":"2162d1558dfaca00d81f2bb0527a1fb328f55aa9e58d24882541539e25f949f11333bb","first_seen":"2026-02-26T23:39:33.769814Z","last_seen":"2026-10-11T00:31:33.974272Z","times_seen":196,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.922Z","timestamp":1791670909922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13276\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\netag: \"69a09f08-33dc\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":13276,"size_decoded":13588,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-10-11T18:39:55.167616Z","times_seen":57754,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.942Z","timestamp":1791670909942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:25 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455364\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-11T18:43:52.865141Z","times_seen":324769,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:21:47.643Z","timestamp":1791670907643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 32989\r\nvary: Accept-Encoding\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://feratotogaz.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://feratotogaz.com/wp-json/wp/v2/pages/355\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://feratotogaz.com/\u003e; rel=shortlink\r\ncontent-encoding: gzip\r\netag: W/\"6ac76018-80dd\"\r\ncache-control: no-cache, must-revalidate\r\nx-gws-cache: hit\r\nx-cache: HIT\r\nx-litespeed-cache: hit\r\nserver: gws\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":182588,"size_decoded":33927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56135)","md5":"7d958710d8cb1245ee45a8c059fa00b3","sha1":"82d262076fdeb5a8d6f1c713dd15655c1b529f3d","sha256":"7787faf47ac65aa5617f2fdfe7f8fc958a714699af6ff2a54f3e349a0522b187","sha512":"700071221bb8b60a1e37ca737341f9c7d6816a2c803e7ba4f14e8a2532601be34598ba35e5a359e592fc94ecd2bf5827aedaca90f469c695184321f841197a86","ssdeep":"3072:Y87e1s80nmPbbzYLxXY8J7SB3WWN0wGHQl9xri3Ru7v:n7mPbbzY9q9","tlshash":"84040870bb50193a313b43bee157b71c90a9da63da0d66e1f4fe901895e5fe2307221e","first_seen":"2026-10-10T22:22:36.293133Z","last_seen":"2026-10-10T22:22:36.293133Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1015,"timings":{"blocked":0,"dns":210,"connect":59,"send":0,"wait":60,"receive":234,"ssl":451},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.47.0","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.021Z","timestamp":1791670909021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.47.0 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-5489\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":21641,"size_decoded":4762,"mime_type":"text/css","magic":"ASCII text, with very long lines (21595)","md5":"343a9e8b53b8e6cfee45153dbc0cd711","sha1":"a6922f54dd0c5209f870d16495b026e1b1aac0fb","sha256":"71ef4851bd7779a1d1749d8a07b3a89db72a6d07ccf5f1504a298da847ca5024","sha512":"316e488b781ad9cf91cf6b4b7ca066e556a75ad2f9dc4607c09f05a785fc4113fff8e3a8e9394a728f3cddd7d842ae59de122ff62386fac74d7e83cba5c0936a","ssdeep":"192:A6N877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSMV:Ap7iNyqEpSk8/aq8uFucbrgIYJV","tlshash":"69a2d9e4e46923c87b32c413e744f64c64daf920cac99d59fa6f850c1de16a70686fb8","first_seen":"2026-02-02T11:00:17.509213Z","last_seen":"2026-10-11T18:04:43.794202Z","times_seen":16166,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.923Z","timestamp":1791670909923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455256\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-11T18:45:05.2044Z","times_seen":569937,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.8.4","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.019Z","timestamp":1791670909019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.8.4 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f23-308\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":776,"size_decoded":636,"mime_type":"text/css","magic":"ASCII text","md5":"a5bf64d5859ee94a3e8e93d592d6d2a0","sha1":"049eb63b42dbb820b06870a430f523bf06880721","sha256":"25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08","sha512":"22c9c7ad86ad2b45124c5ff6b0a41e271ee176cfe0249c973877e51a1895f6d25c8f69b1c4eb565f5fe5e2befe2f4b80d4a89dcea57eeac43b3ae8e020469809","ssdeep":"","tlshash":"fe019024b14eb96412318c28f561857cb1be81075b05997275ecd19bfbde740c02e2c4","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-10-11T18:30:28.631767Z","times_seen":46028,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.049Z","timestamp":1791670909049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-119f8\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":72184,"size_decoded":13482,"mime_type":"text/css","magic":"ASCII text","md5":"aae648ec410260f859ac89e58a8372c1","sha1":"f7320458aadcbaa2ed94c43c8d7ddb9361d0b106","sha256":"d417b6ed49cb6ae3dfe2b0bab5d865472052cd0286a9478c74cbb09a02a56d0d","sha512":"88c7cfdc35aa5e4ecbd8023b966758f30aa7d1f5367820a1443922988c06a4a5a96fc500fab19985a090cbc85c9e2e5db63470e50fbc93f5596fee59346c3b73","ssdeep":"768:0bUiiiukQWIsjoQCSsncTpsTO3DNnYGmLN0yPburmvXnH4:0giii1IohCSicdsa3DNnYGeZPK4XY","tlshash":"d963dcfee1ff10944311e4812643e2e4f329b66cec8a4c98d2a67d9df1c165ca186bdd","first_seen":"2024-05-17T06:44:22Z","last_seen":"2026-10-11T18:30:28.706145Z","times_seen":42937,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.058Z","timestamp":1791670909058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 12:24:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a03b90-3ca5\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":15525,"size_decoded":4298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15525), with no line terminators","md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-10-11T18:58:12.79417Z","times_seen":18226,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/private-apis.min.js?ver=eb85f28c4c729bb4f002","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.081Z","timestamp":1791670909081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/dist/private-apis.min.js?ver=eb85f28c4c729bb4f002 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Aug 2026 03:13:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8670ee-bc9\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":3017,"size_decoded":1498,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2912)","md5":"686c8c2f8a22c5626d7b5f6d7e375434","sha1":"5f7c67bea56fab4122c779f4d30737d2f838ee54","sha256":"9d3faf45132832c5c02589ff5f8d0bfb79843c8e9645ecf8ee39fd0924d17509","sha512":"2b3332c53fbee7db6e4146994b39a67703057aa2a83254ee991bb29da54b1a44b35b38d92b8410a6defe67387ce53d0c105cea274a7b202bbeb6b67b32b293c5","ssdeep":"","tlshash":"fa51717ab3a86ba50de61035a8c96111bec04437332c5531da8ff0b92f800b3cd69eb6","first_seen":"2026-08-19T23:17:42.211431Z","last_seen":"2026-10-11T18:30:59.110698Z","times_seen":1885,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/js/minified/blocks/number.min.js?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.090Z","timestamp":1791670909090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/js/minified/blocks/number.min.js?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-6f9\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":1785,"size_decoded":1019,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1785), with no line terminators","md5":"d668a0e9c0daf30d4f6a9b5149fa6c9d","sha1":"9e7f78213ec91bf1c4fa1f51bef6b74c7ccdea3f","sha256":"9eb95a8faef1f78c5f75bcab0f212fd85782a263ff8c803350e643f2cbecfead","sha512":"01d766ac6938f504f9a67dce72b714e9b599d4326efee61c099e0374e00c9559ac14c5f9cb3682dc18df8dab1877006af9c9f4a75a18674f515bbc839ef1f394","ssdeep":"","tlshash":"35310468b3045db363f99bb1a1d9a252161519d9cc8480b00831dc491d5fed193b6ff9","first_seen":"2025-11-10T18:32:18.193242Z","last_seen":"2026-10-10T22:22:36.303035Z","times_seen":20,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.912Z","timestamp":1791670909912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:25 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455364\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-11T18:43:52.865141Z","times_seen":324769,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/favicon.ico","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:51.388Z","timestamp":1791670911388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sat, 10 Oct 2026 22:21:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://feratotogaz.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://feratotogaz.com/wp-includes/images/w-logo-gray-white-bg.png\r\netag: W/\"6ac76c0c-0\"\r\ncache-control: no-cache, must-revalidate\r\nx-gws-cache: hit\r\nx-cache: HIT\r\nx-litespeed-cache: hit\r\nserver: gws\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T18:43:35.00339Z","times_seen":19034901,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.028Z","timestamp":1791670909028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-684e\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":26702,"size_decoded":4577,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-10-11T18:47:46.985559Z","times_seen":96431,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.045Z","timestamp":1791670909045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f05-280f\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":10255,"size_decoded":1389,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-10-11T18:45:12.670248Z","times_seen":66179,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.798Z","timestamp":1791670909798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15380\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:02:04 GMT\r\nexpires: Tue, 05 Oct 2027 16:02:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454785\r\nlast-modified: Mon, 15 Sep 2025 16:29:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15380,"size_decoded":16193,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15380, version 1.0","md5":"e1a2aef42b3c563534d546605b4b03d6","sha1":"67a1c6e71ee8f70c3ebeb547fda7b0732eb80183","sha256":"c260ffc9d1acb022e1037cb8ffc8baa8fe8c44c2ae74429d3231c7ce6d2b7f21","sha512":"da0629a9a810f869e7ed2fd9b8cf2d269ac369c34c8c901dc08756707469ad576f02ef3c02e1473b17934242785fb25e7cbff1ec83dfcceb52b5f30f7888975b","ssdeep":"384:DlxKwQU0OXIzKuMxPjF50cIlVzgRFF9ZQfTgy88gE/:DfK9rzkxPL3JoU89/","tlshash":"6e62c0864c6afa9286911ee23f266d3fb5989b1048d34a37474c166acc871b76c9f05c","first_seen":"2025-05-30T15:22:21.120029Z","last_seen":"2026-10-11T07:59:49.03486Z","times_seen":2411,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":33,"dns":1,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.658Z","timestamp":1791670910658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.35.5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78196\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\netag: \"69a09f08-13174\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":78509,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-10-11T18:43:52.91907Z","times_seen":177755,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":368,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.023Z","timestamp":1791670909023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f05-d58a\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":54666,"size_decoded":7765,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-10-11T18:45:12.656953Z","times_seen":89486,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.065Z","timestamp":1791670909065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Oct 2026 22:21:49 GMT\r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5781,"size_decoded":1313,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4a2c929cb1d44f82b0e120aa1201ae00","sha1":"16cc25550d473a716605334979d74c9f550a1817","sha256":"e89a4e24476d3370c93e92fde00347093cd6e8e74ab86388a762e99a0ac04d8b","sha512":"548efd61990b63f1b496dbda6f6b544186ec13b0c8a0a73517a59ba260fd235a3fadace8e5a9d5bf8a461bb05f4978da96ab4fdaab22cb705f06a1408f2c7d8f","ssdeep":"96:AOOXaRwOOXaOFZOhOOXaJOOXaeJc+qdOOXau9NtOOxMaRwOOxMaOFZOhOOxMaJOB:fRv7M0OxupRS719OYu6RB7W+Ofu8","tlshash":"d4c1bc91105be500e6472cc923cf7e2add4e21667494c5797ffe2ca8adeac260321b3d","first_seen":"2026-10-07T00:34:16.014558Z","last_seen":"2026-10-10T22:22:36.312399Z","times_seen":4,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.067Z","timestamp":1791670909067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 12:24:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a03b90-656d\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":25965,"size_decoded":6616,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25965), with no line terminators","md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-10-11T18:58:12.876557Z","times_seen":21599,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/js/minified/frontend.min.js?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.088Z","timestamp":1791670909088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/js/minified/frontend.min.js?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-1406\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":5126,"size_decoded":2288,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5116), with no line terminators","md5":"a5424e3f55e5ce8043049f044c33e689","sha1":"40dd54a958610f3a0f507eb134b65a585822c4d7","sha256":"d46938a0885d8503fc1cc4ff926f410715200845f340f02317b7695c923acd0b","sha512":"2f91402c81145ad4f0cd020707df2f41f2c65a10f3988b68acda6d8fe9f03a12f706063e17842d72037ca9f8cfabc797ae67aae5d98df1f733a5940c40b443fd","ssdeep":"96:ZgOcwJyTi20xB030FyixMDtoMiLoMo5oMvhoMhax7OyA7Me0AzOsAr4y6BRasEZT:eOc0yTiTxaEFykMDtotLoT5o2hoMax7X","tlshash":"c4b1da64b7a16436597f01ff32ee22e2fc71c58a790d59843018c8a9771ddf28580fe9","first_seen":"2025-11-21T08:32:24.620687Z","last_seen":"2026-10-10T22:22:36.316257Z","times_seen":223,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.026Z","timestamp":1791670909026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-e7d0\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":59344,"size_decoded":13212,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-10-11T18:33:11.415145Z","times_seen":121634,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.061Z","timestamp":1791670909061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ecabc0-15601\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30962,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T18:43:52.943547Z","times_seen":1101147,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.080Z","timestamp":1791670909080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Aug 2026 03:13:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8670ee-169f\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":5791,"size_decoded":2822,"mime_type":"application/javascript","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-10-11T18:45:12.611922Z","times_seen":26702,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/js/minified/blocks/input.min.js?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.089Z","timestamp":1791670909089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/js/minified/blocks/input.min.js?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-366\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":870,"size_decoded":740,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (870), with no line terminators","md5":"a89230753e35ca6506a99f2210509bd2","sha1":"99a69ca496f3c670600bdf61c6c7054c14beb609","sha256":"9d8f6a989463ef2efef6d313bc81b13fff635e9b38220ac11783c51af458fd99","sha512":"23dd0ee9bef87b5a2b00951f4bb660d035d67095d93655b22b8591fd116ad0595a36166cd42ebfc8cd0e403c19408f93f32fa8e1d1e645fc41d00f01c4692ad0","ssdeep":"","tlshash":"a2118062022c1bf729a5d1f861e5b4460f90d36227a289637079da5bccf4ccf0b75da2","first_seen":"2025-12-21T02:34:12.89965Z","last_seen":"2026-10-11T17:52:15.764385Z","times_seen":244,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.797Z","timestamp":1791670909797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:39 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455350\r\nlast-modified: Mon, 15 Sep 2025 16:29:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18640,"size_decoded":19453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-10-11T18:19:29.168878Z","times_seen":48220,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4de.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.691Z","timestamp":1791670910691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4de.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:21:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 391\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":391,"size_decoded":900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f34c63197816c3e60bea4a9537c5fffa","sha1":"d0cb02de1a16ba96121b7f588c83068a5cbea2bc","sha256":"75c52e1c16937c12b0237d384089300a6d05d8e12d390995674abe2e56886445","sha512":"0c3c3935b6c34becaa73d3eaa0e86bf1c461b7f7015a12a89a4157adc5a8704b6513fb1a126203527547ed1249842501f19acc4f1eb3d203d0eca44dbf582490","ssdeep":"","tlshash":"72e022ebc594d4508a2a1afcefb8009d195340ce66cf60c0c0b39e63a8cb9caac44e12","first_seen":"2023-05-10T13:56:12Z","last_seen":"2026-10-11T13:36:56.112961Z","times_seen":4428,"resource_available":false,"data":null}},"time_used":3489,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3468},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.054Z","timestamp":1791670909054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Oct 2026 22:21:49 GMT\r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":1602,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d91ec9030fb2c3bd5f820020aee2728e","sha1":"04acc2fb866c4a97faedae2314985fb6c8a6c22e","sha256":"275c64f303c8e9a0320bc267c893cdae309afadde9750bebbe4e838040bd4cde","sha512":"225f6a144571bd1ad8fd8ea034da913b7ce41f73da232a15123b6e58c4d0ed552864c410c61fb531abe17db3959b786b44aa2c81c202b5305b3b9f63462b036e","ssdeep":"384:bvWLvKvXvUwvzvavLWaZOUPSJsWJqtUghaVWInkUBAXWWXYjUyvIHWm1iUz+l4W3:bv0vKvXv3vzvavLrZOuSJsMqtNhaV1nR","tlshash":"7aa29dd6486ba405ab870cc163dfbf62ad9e5151a081c4becbfd2cb86cd6d23126075d","first_seen":"2026-10-05T18:21:22.600173Z","last_seen":"2026-10-11T18:53:57.358967Z","times_seen":2215,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":36,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.062Z","timestamp":1791670909062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64829334-3509\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5209,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T18:43:52.979514Z","times_seen":1005199,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/uploads/2026/02/cropped-ChatGPT-Image-27-Sub-2026-01_25_31-200x73.png","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.107Z","timestamp":1791670909107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/cropped-ChatGPT-Image-27-Sub-2026-01_25_31-200x73.png HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 29903\r\nlast-modified: Tue, 03 Mar 2026 11:40:37 GMT\r\netag: \"69a6c8b5-74cf\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":29903,"size_decoded":30214,"mime_type":"image/png","magic":"PNG image data, 200 x 73, 8-bit/color RGBA, non-interlaced","md5":"c22b73af47de78162bb3d4b6a60d418c","sha1":"80b5c0ea372c4d51765180c3d4129f51ca6c8978","sha256":"8afd20b30ae21af32e3352044a07cfce807348cfdb24be297500b408867b619f","sha512":"65d49dbf2be0efabdc7b45b4bdf7224e490d589c92dc3a0a17380b2f660f3b22f2e1f8be07c163471a0eb313e8577a75fe870e4ae187db3bd6092d507089f8eb","ssdeep":"384:1BlmEXLoC/I8+u4gGpuKqwwwSohz69FJCSsIdyop1lJlGfn50ewWMeruGTxljidv:72J5gGcwM6zezCSlBlJlg0rWMCji3Czc","tlshash":"a6d2f184ef1c66f0ed75e67189254c0881ec937bba471b3b9e2f51b6ec9224293b4437","first_seen":"2026-10-10T22:22:36.326386Z","last_seen":"2026-10-10T22:22:36.326386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.914Z","timestamp":1791670909914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78196\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\netag: \"69a09f08-13174\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":78509,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-10-11T18:43:52.91907Z","times_seen":177755,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.940Z","timestamp":1791670909940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:28:58 GMT\r\nexpires: Tue, 05 Oct 2027 16:28:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 453171\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70532,"size_decoded":71345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-10-11T18:38:01.192316Z","times_seen":14192,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/wp-emoji-release.min.js?ver=6b7b0d1f837ef9fdc60f88a22382a125","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.245Z","timestamp":1791670910245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6b7b0d1f837ef9fdc60f88a22382a125 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 01:33:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a504bd4-58e0\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:49 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5813,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T18:43:52.903166Z","times_seen":81729,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.571Z","timestamp":1791670910571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.35.5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13276\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\netag: \"69a09f08-33dc\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":13276,"size_decoded":13588,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-10-11T18:39:55.167616Z","times_seen":57754,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/css/minified/blocks/default/frontend.min.css?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.038Z","timestamp":1791670909038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/css/minified/blocks/default/frontend.min.css?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-d549\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":54601,"size_decoded":5805,"mime_type":"text/css","magic":"ASCII text, with very long lines (54601), with no line terminators","md5":"e2f5b2e3f6b20d1f569a9e11feb1d7a7","sha1":"2ab996fdcb67d93682855acb357f8412df59279f","sha256":"556bdf426eee8a249c35d9f5de27d5270523e66e4a21e9afa4bdd7c244e36e34","sha512":"b8e2c1076077698c4257658dc4f1a09fe40db9ad191cd1170e19cc76861767301cd4a77e4e97e183d8f3e2c40cfcfb948423beb7f0d65a0ccb6ae34fde0a4d33","ssdeep":"384:yMHnMTNb8gKxFT99Oat1MoNBOpaOjMEO8oMmD5YcOyy8eJsQSNM+8OWSe9xW:yMHMBb8gKxFT9lt1MieM/MAYIy+MtH9Y","tlshash":"0133dc01fae11376b9f00a6834d454bf2a31666399550bffb102ec4963cf9ef19a1f89","first_seen":"2026-01-10T06:24:36.179415Z","last_seen":"2026-10-10T22:22:36.330874Z","times_seen":61,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.055Z","timestamp":1791670909055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-e2d7\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":58071,"size_decoded":12959,"mime_type":"text/css","magic":"ASCII text, with very long lines (57884)","md5":"f4af7e5ec05ebb0f08d43e2384266abc","sha1":"a1869e155e92fa178b9c3ae6dff787df57f195c6","sha256":"fafc4160788beca657ec3e3041976281fb6d54a0e82bb4d22a433f7c6bb8b1d6","sha512":"8352ad9a565e0092429759d29e9384f9c4a5df874fdc448a247080993a3ac99961f13737d57cc4b26ba7107a4bf20718d92429626e175cd46dbbaca2790ebe03","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bst6VSzO:0E0PxXE4YXJgndFTfy9et5q","tlshash":"6943f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2024-03-11T23:30:43Z","last_seen":"2026-10-11T18:47:46.561282Z","times_seen":117596,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.072Z","timestamp":1791670909072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-162d\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":5677,"size_decoded":2804,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5677), with no line terminators","md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-10-11T17:52:19.431556Z","times_seen":13526,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.076Z","timestamp":1791670909076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f06-7c88\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":31880,"size_decoded":10730,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-10-11T17:55:22.813526Z","times_seen":72216,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/uploads/2021/03/setting-icon.png","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.111Z","timestamp":1791670909111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/setting-icon.png HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 5818\r\nlast-modified: Thu, 26 Feb 2026 19:30:05 GMT\r\netag: \"69a09f3d-16ba\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":5818,"size_decoded":6128,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, interlaced","md5":"886004c28eb2755ba57360ed1ebe9ec9","sha1":"c0fe2d9fa67dfa52c24a219c6990ff919b8c5731","sha256":"91f6c05a3d562d24242d74c66c1440e4c4b51a7fb57005aebdbdb996cb1c8e25","sha512":"d72ca739bda4681f83c23f1ef8bece0feec67212744dbf13fc66cd4373fa6b86792b1825b3511f3676bb02ab47973303427e59f41bc46f8efdeeb618345c71c2","ssdeep":"96:q88X/PugwughTMge3DX0AJvFSqwm6r59UAFmGq1K9DNySLLS+/Z+:auegA37pzZw59UAFm29Jy/+E","tlshash":"dac16d7642ba61920794e0623cd763395d3750e1b887e42affdec8215f241fd45bc18d","first_seen":"2023-07-17T07:37:26Z","last_seen":"2026-10-10T22:22:36.335696Z","times_seen":23,"resource_available":false,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.105Z","timestamp":1791670910105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f07-2121\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:49 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":2988,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-10-11T18:45:12.579555Z","times_seen":169156,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.657Z","timestamp":1791670910657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78196\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\netag: \"69a09f08-13174\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":78509,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-10-11T18:43:52.91907Z","times_seen":177755,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/23f0.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.695Z","timestamp":1791670910695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/23f0.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:21:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:04 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1479,"size_decoded":1228,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"630f5938948131784285d97d57a3e8a0","sha1":"69d9e77895782347e90dc2c1c5bc34b147a2f8d8","sha256":"9261f80678e69407d7626915cbff3020581891e16c039fc7aa207228a21b2832","sha512":"ede08b3faf37188c9480a973b866a133a57fe8134463291755b906a04a140f0c43b4a54b648d74931806a47da7cccfc8902296b153a3309b5c3101c8a1a71b91","ssdeep":"","tlshash":"873115c62f3471fc44cacfb98f39f8a821dab4bc1f928884a199dd1d10cbd6ab541e00","first_seen":"2023-05-31T11:12:19Z","last_seen":"2026-10-11T16:38:57.145285Z","times_seen":1070,"resource_available":false,"data":null}},"time_used":3470,"timings":{"blocked":0,"dns":0,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3453},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.12.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.011Z","timestamp":1791670909011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.12.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 12:24:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a03b90-b2b5\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":45749,"size_decoded":9283,"mime_type":"text/css","magic":"ASCII text, with very long lines (43567)","md5":"42496634dc1c555e846841a0080ada59","sha1":"9e2de8d81b0caa2745f374746c60a223c1ba27d7","sha256":"a8ff2f0b3249b1dbadfe779835a4b29346af2941144d12d2f95c2a6e505f4088","sha512":"68529399c5c478f9d4a9ce838ee0bc39e4a36e0f89e88633e4840795957f3146da15d8b6bc81e308f464dffb6bfe080bc42797fd4c3939f05259a99a562dbf8f","ssdeep":"768:mPcOrP1rhDYollnk+FHk3YCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:AnYY+tHQtBU5PTwDuaP","tlshash":"6823f96043d035391233873efad6b9082b694313d74f26e6f8ab8668c9c57d71a72e4c","first_seen":"2026-01-21T20:47:01.725402Z","last_seen":"2026-10-11T04:50:06.060824Z","times_seen":6534,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.8.4","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.017Z","timestamp":1791670909017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.8.4 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f24-14447\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":83015,"size_decoded":9950,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1646)","md5":"993387aae0b00dd250f8c6bacb602bb4","sha1":"c2ee953f8cbcfc03cb53fbb0375bef674ae52e1c","sha256":"47c7bdd897d958f095447c03e1752dc3c746563dc4507f7babd083348bd1ead5","sha512":"59c1a8d34241eb3d4c8993d3b9d755af35c5662a5b7f3ec85829ea63b34b44c7665c6f96099d920784d40b5065f0e9b5ca6434b03c762d353d7f7fcc713e3627","ssdeep":"768:uGU2+Rm5ukW6EdVBSs+QXLjBnTGpIq5pbTpqzGI5eFV/ftc/yorXzFSSBlzfSKVt:uGU2+Rm5ufoqDr1GLvm","tlshash":"5c83d8861dc329749a16681da3ee936457b60043cf35a9ac36ed821ccf82342b7f6f57","first_seen":"2025-11-18T16:28:00.164576Z","last_seen":"2026-10-11T18:30:28.646574Z","times_seen":20213,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.030Z","timestamp":1791670909030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f05-10a2\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":4258,"size_decoded":1066,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258), with no line terminators","md5":"3d78dc83d20515d554c4a45df3500bb0","sha1":"36fe7b5ebfeb079e9e20b12222766b1922382586","sha256":"f042f3243af9c3e339447b3aa8acf5776c9c12bf03b67e87013750ca5ad7fb0a","sha512":"c61feebb9eeb0cc5ef3029e7c6e94797face0f9bfb4905a51e96d2e59c63978688aff83fddea3326cc5d197e3cace6cf42c94f6cfb98ff7c6c16da61e7a28f32","ssdeep":"96:voAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:voIOq5a75slUmor","tlshash":"a5918555b94f8218b79f141b8e173e4cf04467c9fa618a81d9f37252f0aed842f209e9","first_seen":"2025-05-04T13:14:28.472981Z","last_seen":"2026-10-11T18:45:12.702841Z","times_seen":51912,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/uploads/elementor/css/post-355.css?ver=1791448009","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.037Z","timestamp":1791670909037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-355.css?ver=1791448009 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Oct 2026 08:26:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac753c9-b4eb\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":46315,"size_decoded":4050,"mime_type":"text/css","magic":"ASCII text, with very long lines (46315), with no line terminators","md5":"ef68b6d0916b619f4f21a407f356ad3b","sha1":"bfd3f12540ea63155b8485d580cc9f59dd0637b0","sha256":"73741eadf724acdcd41f3792c96a7129f7bbab7066695c2c67c6027ab0bf860c","sha512":"887a0598554f04dd2423fb6f2c9c4659b92ee1b007342ae82cf8f3d2e537ecc07af21e8df7064a326926b4db8e092936995683ae8f5b6c401d2e7eef26ac6f92","ssdeep":"768:GIxRULUvtwUewYvoUszlBkaw0URkhRglq7UPUjv2UnUgjfvqU/8jn0+niykQY2Qj:c4UkhR9bwcsK","tlshash":"fe2339503d135019b63f546fc413a9acb55aaccbd27f72c7f8a06123f8b6e92739060a","first_seen":"2026-10-10T22:22:36.342855Z","last_seen":"2026-10-10T22:22:36.342855Z","times_seen":1,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/6/6b/WhatsApp.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.110Z","timestamp":1791670909110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 05:19:15 GMT","end":"Mon, 09 Nov 2026 05:19:14 GMT"},"fingerprint":{"sha1":"52:17:30:E7:B5:4D:78:C3:1A:27:27:36:2B:27:EF:C7:29:CE:9C:13","sha256":"AE:63:EF:37:2A:14:17:F8:1E:87:39:CA:5F:A2:71:13:FE:DF:F3:0E:88:8C:B9:2F:7D:A4:27:15:B3:2F:A8:CE"}}},"request":{"raw":"GET /wikipedia/commons/6/6b/WhatsApp.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 12:24:53 GMT\r\nserver: ATS/9.2.15\r\netag: W/4025a2c2826def311c3b73dfa38a9b20\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: qag4572nwx19x1y7zian641jyclf2pf\r\nlast-modified: Mon, 28 Feb 2022 22:39:04 GMT\r\nx-ratelimit-limit: 600000, 600000;w=60\r\nx-ratelimit-remaining: 599999\r\nx-ratelimit-reset: 8\r\ncontent-encoding: gzip\r\nage: 35816\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/97691\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=OVDK81dji1nM6E919oOh3AP1AAAAAFvdog4eFqB2b1SiGvzmv0pKN8qPjvUXT3i6;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sun, 10 Oct 2027 00:00:00 GMT\r\ncontent-length: 1057\r\nx-request-id: 2b8f81cd-d459-4416-8c7f-b841b598fb5c\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"OVDK81dji1nM6E919oOh3AP1AAAAAFvdog4eFqB2b1SiGvzmv0pKN8qPjvUXT3i6","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-10-10T00:00:00Z","raw_expires":"Sun, 10 Oct 2027 00:00:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=OVDK81dji1nM6E919oOh3AP1AAAAAFvdog4eFqB2b1SiGvzmv0pKN8qPjvUXT3i6;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sun, 10 Oct 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":2501,"size_decoded":3133,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4025a2c2826def311c3b73dfa38a9b20","sha1":"e110e162c96cb014763e841bad3615da27348073","sha256":"dd6a4db2c394ca11aa8ab087369f2f50a12e6f874e49db7b1d5609d0a8fb28ca","sha512":"a40b02ab07e917b0070c7f1e0587a0f8753e157a218296f9ec2d2e06e273657ab82d831d494de839730546e3473ced9f0516175f755d313189528811bc4f4c60","ssdeep":"","tlshash":"695189e5b7ecf17dd8a787ecca31686c131e159e72278d98c24dee00c492d4d954c8d1","first_seen":"2023-07-13T00:36:46Z","last_seen":"2026-10-11T17:37:41.946784Z","times_seen":2479,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":22,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.029Z","timestamp":1791670909029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f05-230\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":473,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-10-11T18:45:12.591331Z","times_seen":141287,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/dom-ready.min.js?ver=3fe927cab37bf38d6a23","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.068Z","timestamp":1791670909068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/dist/dom-ready.min.js?ver=3fe927cab37bf38d6a23 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Aug 2026 03:13:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8670ee-371\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":881,"size_decoded":825,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (683)","md5":"7e905912e68f450e58ff87827d799840","sha1":"fc2ca5b65017b078702664499ac86ef714e2183e","sha256":"99aaf7045a5c801db73f65f4108f8ef0893178c0fb726b70d986641845588ec1","sha512":"2796a6867cfea02aa5056a26d65c3ae6630ee098c466521f51b8a60ce3aca2a37086b0757bf084313f9f0d73c1533998940cbf0d4d872717ead31a782a1f5fbb","ssdeep":"","tlshash":"761100a62dcaee3145dd55c6823d6380f628687c1669b0d0a39cc4b8d9e840b01bdebb","first_seen":"2026-08-12T14:43:17.725391Z","last_seen":"2026-10-11T19:05:42.241367Z","times_seen":5713,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/uploads/2026/02/ChatGPT-Image-27-Sub-2026-12_14_01-1024x683.png","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.835Z","timestamp":1791670909835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/ChatGPT-Image-27-Sub-2026-12_14_01-1024x683.png HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/wp-content/uploads/elementor/css/post-355.css?ver=1791448009\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 326622\r\nlast-modified: Fri, 27 Feb 2026 09:14:29 GMT\r\netag: \"69a16075-4fbde\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":326622,"size_decoded":326935,"mime_type":"image/png","magic":"PNG image data, 1024 x 683, 8-bit/color RGB, non-interlaced","md5":"01c9f83c565f4c7acae356739b2fdcc6","sha1":"feef18f0ae3746764788fcb9c82b9c469bdbaa8e","sha256":"ed1cb93e8cc0ae125f3518d93098f1141bbc97e7673002a293d017891b15a52f","sha512":"770489efd5c86276db8843f39bf40c45fc9750e48f88f807c38d7c03ac44d8ac939966b8a4bfa0d199c627695dc31d5b8489734eadca026f5ac462afbcdbd65a","ssdeep":"6144:SzpkDPy08jcgbI5xekjloMty//WmNDV65M6YPtMQ1YyuJoBVgAEQxS:Sz2DGbILjKQ5tt6uykAVS","tlshash":"4164238042823028e52a5f4214bcf573d4ba778e56dae4ee3c7eb5a3edc5af41532c90","first_seen":"2026-10-10T22:22:36.3484Z","last_seen":"2026-10-10T22:22:36.3484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":828,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.916Z","timestamp":1791670909916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:39 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455350\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":30205,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-10-11T18:41:37.209503Z","times_seen":17652,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/uploads/elementor/css/post-1129.css?ver=1791448009","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.025Z","timestamp":1791670909025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-1129.css?ver=1791448009 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Oct 2026 08:26:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac753c9-57a\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":1402,"size_decoded":784,"mime_type":"text/css","magic":"ASCII text, with very long lines (1402), with no line terminators","md5":"1117ed08e3d65b390b577fc830949835","sha1":"ca5430e82a190c93296f419622c0db4ba18462fc","sha256":"2e51aa493467ec563d7ad92a4753d316c2b5639bd994a4efff2a9a8ea4b608d2","sha512":"a2832573309ef6bb09176b203dcd93d71abb49bc5a5ad6c53353ebad79fbe60f56d74c6ab43251790ee8863f2a203fadaa8b0a42710210ff74eadbd54f832af5","ssdeep":"","tlshash":"1e2103457e23d433d0b7093fd2d7b42c011cd45ba25e8adaf41d9249f9bf6076268643","first_seen":"2025-05-14T10:31:52.425714Z","last_seen":"2026-10-10T22:22:36.351761Z","times_seen":34,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.032Z","timestamp":1791670909032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 214\r\nlast-modified: Thu, 26 Feb 2026 19:29:09 GMT\r\netag: \"69a09f05-d6\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":520,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-10-11T18:45:12.650801Z","times_seen":137589,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.078Z","timestamp":1791670909078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Aug 2026 03:13:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8670ed-13f3\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":5107,"size_decoded":2188,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-10-11T18:45:12.695752Z","times_seen":27143,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/css/minified/common.min.css?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.039Z","timestamp":1791670909039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/css/minified/common.min.css?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-44a5\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":17573,"size_decoded":2751,"mime_type":"text/css","magic":"ASCII text, with very long lines (17573), with no line terminators","md5":"331267c3260471779887cba43e485f1b","sha1":"ab3828bd7e780f5fa174464da96232ea11c914c0","sha256":"00d1b904156c69540eb4b1033e711f3beb488b1615ffdf3b2406879651adfb73","sha512":"fdde522693547b474ef522842f794a967dd0b6a446d4353fa7b0d0e3dfc9800523d8a2f19f444b43b16254a17fe7a704918a789d2b61f9fb22c20bd1db3383a5","ssdeep":"96:yVFjkJ7dKUCuR9j9kmcMNWQFx1EY9JprFmkY9gOTPLgPg6ji/Pf96JVCnNfzzF4e:y74JumD9MLyg6ji3fziBTPhUOGJmYLp","tlshash":"7c827704ffb613a6b234095a3984213f5e30604757815efaf484dc82a9cf9ef6da275a","first_seen":"2025-08-26T22:51:23.962882Z","last_seen":"2026-10-10T22:22:36.357479Z","times_seen":327,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/jquery/ui/core.min.js?ver=1.14.2","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.075Z","timestamp":1791670909075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.14.2 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Aug 2026 03:13:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8670ef-48f2\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":18674,"size_decoded":6868,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8489)","md5":"ffb9792c762c28c883fbda04cb87bfd7","sha1":"1d142a621d684714fd78aa415b1d13adca03fd13","sha256":"b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7","sha512":"5605218f2ca25c9bbd553aef21adcdab3819eb7a5ce0081a411d3ca82b26bffa129b8aa7013f6d18f933fc9e526380e1b92da6c87938eb3cfa660a05b3a7a98e","ssdeep":"384:379nP8FkFv28i8WVVnh5GX0Ci+Q8LMSAQT/hSd:9P4k0vfSA4g","tlshash":"4a82e64db2467851c6e7a1a5102f520fb132a59cf00ac89ef47ccde93c7aa996073f79","first_seen":"2026-08-08T12:00:35.066846Z","last_seen":"2026-10-11T18:45:12.648034Z","times_seen":20038,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/uploads/2021/03/rotor.png","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.114Z","timestamp":1791670909114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/rotor.png HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 5371\r\nlast-modified: Thu, 26 Feb 2026 19:30:05 GMT\r\netag: \"69a09f3d-14fb\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":5371,"size_decoded":5681,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, interlaced","md5":"110b9db9125cc6eeec951678bcf94481","sha1":"2a1c99aa536abaa4d137defd27f3c5727ee4fefd","sha256":"85111ddbbbc56f3c43849b3c65d0ef74d02325adac95ec89fd896fc182fd8aff","sha512":"66967ed6d11ec19a294c1713374264e0e83efcbbd7cda0f6c837d73048f1f762bef4b089d6ec22a68aacbc4a08f25eb37176ab6f69c5105dcb595eb8ab089724","ssdeep":"96:q0OX/p9SHJFnhvMowXBrM5viLSqh1X8StndWWblt48Fj7+8bmjhJk3B7nQqJ3j:U9MFmRr6+r7xdx/7z3Lz","tlshash":"5bb19ed1e63200082286dd262cf97b6918271fc3c36098b27a8ddd273c341f5706c8ed","first_seen":"2023-07-17T07:37:26Z","last_seen":"2026-10-10T22:22:36.361346Z","times_seen":17,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.935Z","timestamp":1791670909935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455256\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-11T18:45:05.2044Z","times_seen":569937,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.943Z","timestamp":1791670909943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:39 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455350\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":30205,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-10-11T18:41:37.209503Z","times_seen":17652,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.044Z","timestamp":1791670909044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-5489\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":21641,"size_decoded":4762,"mime_type":"text/css","magic":"ASCII text, with very long lines (21595)","md5":"343a9e8b53b8e6cfee45153dbc0cd711","sha1":"a6922f54dd0c5209f870d16495b026e1b1aac0fb","sha256":"71ef4851bd7779a1d1749d8a07b3a89db72a6d07ccf5f1504a298da847ca5024","sha512":"316e488b781ad9cf91cf6b4b7ca066e556a75ad2f9dc4607c09f05a785fc4113fff8e3a8e9394a728f3cddd7d842ae59de122ff62386fac74d7e83cba5c0936a","ssdeep":"192:A6N877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSMV:Ap7iNyqEpSk8/aq8uFucbrgIYJV","tlshash":"69a2d9e4e46923c87b32c413e744f64c64daf920cac99d59fa6f850c1de16a70686fb8","first_seen":"2026-02-02T11:00:17.509213Z","last_seen":"2026-10-11T18:04:43.794202Z","times_seen":16166,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.048Z","timestamp":1791670909048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-2dc\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":732,"size_decoded":635,"mime_type":"text/css","magic":"ASCII text, with very long lines (312)","md5":"1f1c6abbb54c6d189b7263e0861fae8a","sha1":"6bc092e1e58b2fa6364bc17b02443ade0c6d32f1","sha256":"5009a34e30063ffb89185274681b359ae8c7dac19a606d5b1456ee3524cbc9b0","sha512":"7dd9accf0a69d2a89009443de17d6f09c3ca55e62fe9c7c4d3f12f89354b11559d83436fbc4befc8618ccbe0fe46fea657743d758e543b79a3d039ce36852b33","ssdeep":"","tlshash":"8f0164b0810510048a40091a2bdfbf28ae09a245781daea572239c1edcf4e4d61faf0d","first_seen":"2023-04-10T17:28:04Z","last_seen":"2026-10-11T18:30:28.749613Z","times_seen":42550,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/url.min.js?ver=7b0de086d4ae11d55704","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.083Z","timestamp":1791670909083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/dist/url.min.js?ver=7b0de086d4ae11d55704 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Aug 2026 03:13:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8670ee-28b7\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":10423,"size_decoded":4275,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10334)","md5":"356029f3e2535da4fef4deb11b02bd1c","sha1":"6967078d7562cde4d737c6c5efdef968deb99cee","sha256":"e24b520879af3493fc9cafb551136ee37ab119d73bd5608d86899e23121e004f","sha512":"4be0d6d9f3a845cfd607d4c10a799ad14695737c8e68f23d0d54ae0396a0ed6c40f73464439898bb95fd1a6bb26a4a7fd62c8f62b157669d4ea54a38aca907a1","ssdeep":"192:jNkT4xiQTYTXgGh1SZAp4N3z2E3OtSAw1NNvgzjsJLunYTAxinbZhX5:jO/QTwgKi64d2GOtg/4jsJCnKJnTX5","tlshash":"e62221dd32b320c69fb65d50dd75d1daa17b0fb1046a00449bbf79d02a221ace383a7b","first_seen":"2026-08-19T23:17:42.140933Z","last_seen":"2026-10-11T18:29:10.822931Z","times_seen":1955,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/js/dist/api-fetch.min.js?ver=6f2a4faeee3c722b1e57","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.085Z","timestamp":1791670909085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/js/dist/api-fetch.min.js?ver=6f2a4faeee3c722b1e57 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Aug 2026 03:13:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8670ee-1d56\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":7510,"size_decoded":3669,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7312)","md5":"dd9b363356234d2dc4e987c26183f36b","sha1":"c86390e7e5f8baf9f290c1ef04f944ce2c4ff248","sha256":"406b522aeb10dbf49dfa792b47fad4be37ef959bd77f48506e51cb90fd440ed7","sha512":"5d401c720aade7634f47a0f074b55c7503449f557954b99b2bc7b2374ff6299d347b106fd22614dacfb55622659f9b9b07aed70427f2fe71edb4db7605587631","ssdeep":"192:zpdeCYk0oG7T2KDPyB0V/Sr6cXw6Dzz+IjQFu:uCytqB05Sr6cw6b+8T","tlshash":"f3f10ae43ac3f2a7537e47dce4be4461fa8a64ac845cd410f2d4d82961e4846c4a7fb6","first_seen":"2026-08-19T23:17:42.225489Z","last_seen":"2026-10-11T18:03:48.471261Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/build/formSubmit.js?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.086Z","timestamp":1791670909086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/build/formSubmit.js?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-f090\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":61584,"size_decoded":15262,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61516)","md5":"1c217e99b826e8e6b597de59f26825ca","sha1":"29536ce9191aed00346c5a46da6554c3b18bf50b","sha256":"0948e8e4b2d8c8ef194fa85468a1631579e2fac7fb04abaa4e89c936713476d1","sha512":"817cdc737e05508cd50a2250c5a2ea78db88f75c254ede96ec9a9f507943dbb700d566b435cb06691d1350369d599f3340750a4d1e75ab75313b222b1f7c8756","ssdeep":"1536:FQtvhWgeL18fx+yT5BIcKXftR215A1tRjMvHx:wzc18QyocKXL21yyHx","tlshash":"0053fadcf3d7f0b616b3a172d06f1057e2353a1aa84854509615ccd2b8ad9cba233fb9","first_seen":"2026-02-19T09:28:21.447237Z","last_seen":"2026-10-10T22:22:36.367342Z","times_seen":21,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.937Z","timestamp":1791670909937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:28:58 GMT\r\nexpires: Tue, 05 Oct 2027 16:28:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 453171\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70532,"size_decoded":71345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-10-11T18:38:01.192316Z","times_seen":14192,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-json/sureforms/v1/refresh-nonces?_locale=user","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.015Z","timestamp":1791670910015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-json/sureforms/v1/refresh-nonces?_locale=user HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://feratotogaz.com/\r\nX-WP-Nonce: 4124837552\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 116\r\nx-robots-tag: noindex\r\nlink: \u003chttps://feratotogaz.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nx-wp-nonce: 12faee808d\r\nallow: GET\r\nvary: Origin\r\netag: W/\"6ac7caee-74\"\r\ncache-control: no-cache, must-revalidate\r\nx-gws-cache: hit\r\nx-cache: HIT\r\nx-litespeed-cache: hit\r\nserver: gws\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":116,"size_decoded":773,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"26eb3a1cacca7b399abd4abbf7159956","sha1":"dab2b62bf585fffec5a78cf3a444e8c1cefe460c","sha256":"2737cd9421a0c7c026d6c80e8d292093f61baa1875c4c172eef60e868ac02dfd","sha512":"811d2b694e087663cebae323f5d30fdafcbd698d769b6bf51b73a56e1190a9fd51de6f22c03a111493701f233e4e65be15653dcac4aa801c429071ac9b05d5da","ssdeep":"","tlshash":"e0b01261211207c2df2513d662786f1766d83523f3850884db3ec8b80f68c7e3582326","first_seen":"2026-10-10T22:22:36.369477Z","last_seen":"2026-10-10T22:22:36.369477Z","times_seen":1,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.060Z","timestamp":1791670909060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-3ae1\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":15073,"size_decoded":4561,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14886)","md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-10-11T18:47:46.925574Z","times_seen":80641,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.939Z","timestamp":1791670909939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feratotogaz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 455256\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-11T18:45:05.2044Z","times_seen":569937,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.113Z","timestamp":1791670910113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-544\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:49 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":1348,"size_decoded":975,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-10-11T18:45:12.655408Z","times_seen":143697,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4c5.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:50.694Z","timestamp":1791670910694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4c5.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:21:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1923,"size_decoded":1281,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5f722a37a7e3800b78a61c3ebd2dd74","sha1":"b41658d39d59680d745809d0f47d9bcad34b7df4","sha256":"4e4fa511bde5a54622dd99247d66babce99acad2810ce3c1755981eaed0d88ed","sha512":"c76c9336952ecac244bf96ebf2a4968665ec4dc3e26306a08675455ee85be97d42b9a0c84c514dfa99359c169a03dcb07f4d2b2b601bf662d5d33ace971080a1","ssdeep":"","tlshash":"ba41dec4c64480bc0856eadf1f7da13cf30d9448e3b7f289908a8e1991979d3e627a44","first_seen":"2023-04-14T04:05:48Z","last_seen":"2026-10-11T16:38:57.125603Z","times_seen":1962,"resource_available":false,"data":null}},"time_used":3273,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.033Z","timestamp":1791670909033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f05-1276\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":4726,"size_decoded":775,"mime_type":"text/css","magic":"ASCII text, with very long lines (4726), with no line terminators","md5":"c5fd583e176fa5c734da0599bfa3dab0","sha1":"cb5471dfa3e203d47469046bc1533a7269c5e000","sha256":"398e2425ac154b75384c55af3fcb40cf68ef50e15714b9dda11bf54ee0b9fc35","sha512":"666a401784702b993c79d2868133b6a2541e283054f82c01ba510aa21070135259a6842ae45eb7d0a8502d2910a30ecc52f12104fd32afa83913e6ea916c4240","ssdeep":"96:jm1PrPhP7VSPdiDPvmRpwPRAE3wBfPJLFZkPhO:jm1PrPhP7VSPdiDPvUmPV3wBfPJLFZkE","tlshash":"53a1910238d32002192f951f0a53291c557588d8dcdbb9a6f862e7169bffdca376287d","first_seen":"2026-01-07T23:29:45.243297Z","last_seen":"2026-10-11T18:53:57.406039Z","times_seen":22161,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/css/widget-testimonial.min.css?ver=3.35.5","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.035Z","timestamp":1791670909035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-testimonial.min.css?ver=3.35.5 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f05-66e\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":1646,"size_decoded":661,"mime_type":"text/css","magic":"ASCII text, with very long lines (1646), with no line terminators","md5":"01e3eb717747c597e21cdac2f1068089","sha1":"1c9a23b4251a4edfb9c53e12bd0a809f3b135ec7","sha256":"b48c1aef29e9f58b648c459be62663c320577ea8ebc1009dc0089ee64aa0b3cd","sha512":"96113b52010990fe2771a01b3a3b8f6bf3651eef627098d5ca22500c37f06d82582d9819169df2d99364d7507cdd92adb40f1f8c9cef54a22c361ba129ce4ec7","ssdeep":"","tlshash":"d0317c213e2b5005051bb1bfa45be58e5f64fde8abd25b68f841e01bee698743f33140","first_seen":"2025-09-28T20:36:48.710509Z","last_seen":"2026-10-11T17:27:38.002486Z","times_seen":3542,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.051Z","timestamp":1791670909051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f08-2d7\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":727,"size_decoded":638,"mime_type":"text/css","magic":"ASCII text, with very long lines (307)","md5":"8d37441d69ebc9b55dff2c7c214ef997","sha1":"9a292c8559131ea8838899863987ffdcfb4005ea","sha256":"93cf6e96459e42f9f656e03ec4800578dc2c021dcde475c9e5e891a7780b0866","sha512":"25e4e29eadc6a9c8b81b8e000726d8a9eea9d3378ca6faa641d5b9dcb64039ba97904fd0b2bf50a8303b7cd1194d08c80641025a635f8c3fd2ebd9217f824704","ssdeep":"","tlshash":"a201247d81022a504a8008152adabf689e99b0a6785c6f7572329c2eccf4e5961a9f0d","first_seen":"2023-04-09T05:14:34Z","last_seen":"2026-10-11T18:30:28.720394Z","times_seen":42749,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.052Z","timestamp":1791670909052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Oct 2026 22:21:49 GMT\r\ndate: Sat, 10 Oct 2026 22:21:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100422,"size_decoded":3486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1566)","md5":"862a4827556c7bfb87535ac384321d23","sha1":"0e7250e3de4a860eb3898e17ed319450e427565d","sha256":"33c951b402c9bea213649f907555b538120f0509587981a8bc90b27b6d0d5828","sha512":"2c86cf9a808f145f050c0a8f05a13f9b4dbc99cc58f72cc7cfec152a446e471a825282816b5a499060fcdff5224c08ffa9c51cd4fd9187f5bc07b7233fb0a9b4","ssdeep":"768:yDdD9DADND0BDUD7DLDdAgTQ0U3aKWHncX0LwhRPuOJ+0aFUEIV1Cl0heL75EkfI:akzG1I36Zy94TexM3So","tlshash":"f7a30f91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbda6526835c","first_seen":"2026-10-05T18:21:22.626547Z","last_seen":"2026-10-11T18:53:57.407062Z","times_seen":2301,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":38,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=09382f635556bec359b3","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.070Z","timestamp":1791670909070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=09382f635556bec359b3 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 19:18:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09c84-19bb\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":6587,"size_decoded":2630,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6587), with no line terminators","md5":"a6e64218d897c667223b9729d964464f","sha1":"298e350fbb69196edb071a2023e2a045c8528253","sha256":"a78ffc057526aa84675d2eb5519424156f7d9ba3b601704f606b2e676b5615e7","sha512":"519f27265b2f723b0acf9e7cf6682b73f0ecaeded75562d7d9b1f185f2331ff7a7bbbe2c11f9093ab1e38b16d1a78b77bafc677569f061f906380cb459e923d5","ssdeep":"192:tXCj6CnyYlqqOre482UO7N1gqts1SIVje5L1Cd+eLXPMo56MxdC:u6CyYlq/i482UO7NW1vV65AxrUowMxdC","tlshash":"5ed1b63a3224d9340bba4aefb978e3d4f424b519b90792e4c99ccf0924b5d43139876a","first_seen":"2025-12-08T16:51:03.59113Z","last_seen":"2026-10-11T17:52:15.581474Z","times_seen":10250,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-includes/images/w-logo-gray-white-bg.png","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:51.454Z","timestamp":1791670911454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-includes/images/w-logo-gray-white-bg.png HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://feratotogaz.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 3241\r\nlast-modified: Thu, 20 Aug 2026 03:13:47 GMT\r\netag: \"6a8670eb-ca9\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:50 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":3241,"size_decoded":3550,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"dcab89b8e04bf53fcd7f6a44a8cb4fae","sha1":"c3532d39f298c863a7489a2b4e95bda0676279c1","sha256":"c965a500f698483526faf92ac286047cecd825608cd1d83276de392b30a13a83","sha512":"ff82f2380c8ae37c2103ec466fb929353d3c8437c38ab95253ef97261fc9697c6af673a635e772d68247584d212db929f6c9cc0d5166f6907303ad6574810ee7","ssdeep":"","tlshash":"aa616dec7532920c4035393a729b9d01f7671582f772bf454f5eae634b059c4214d2da","first_seen":"2026-07-02T05:49:04.382065Z","last_seen":"2026-10-11T19:04:43.7863Z","times_seen":2843,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"feratotogaz.com/wp-content/plugins/sureforms/assets/css/minified/frontend/form.min.css?ver=2.5.1","fqdn":"feratotogaz.com","domain":"feratotogaz.com","tld":"com"},"ip":{"addr":"104.247.165.35","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feratotogaz.com/","date":"2026-10-10T22:21:49.040Z","timestamp":1791670909040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feratotogaz.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 12:43:18 GMT","end":"Wed, 18 Nov 2026 12:43:17 GMT"},"fingerprint":{"sha1":"F1:8C:8D:7A:61:86:43:7F:47:0E:94:FB:22:B0:1A:5F:D8:CF:ED:76","sha256":"06:E8:5E:27:2D:C5:A6:5E:40:1D:A9:68:68:54:7A:73:FD:FE:AC:B4:33:08:C0:EE:F9:9F:96:FB:DD:6D:41:BC"}}},"request":{"raw":"GET /wp-content/plugins/sureforms/assets/css/minified/frontend/form.min.css?ver=2.5.1 HTTP/1.1\r\nHost: feratotogaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feratotogaz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:21:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 19:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a09f28-33d1\"\r\nserver: gws\r\nalt-svc: clear\r\nexpires: Sat, 17 Oct 2026 22:21:48 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":13265,"size_decoded":2902,"mime_type":"text/css","magic":"ASCII text, with very long lines (13265), with no line terminators","md5":"adbdfea5d87d756d0964a79bce30c058","sha1":"5df76556a26f349497d3efcf0cbdd11e168a307e","sha256":"4b89b6df3182c3690ab3c70c2166ab0afaf1cfa02b3e2a811bc4250f65d61a69","sha512":"1dd7fddef3302c58c779ccda8448441045890d1b2740a2f2ea032511fa6592a0cb9aef12dac5b0a4491eb62a23ccded52b4019c3f7372d7fa7f0bf3620488fef","ssdeep":"192:y74JqcHTXe/kMKQw4yP2IJq9xYX2zLZjK8qnGSuelG3:yMzQwtRoYG","tlshash":"f152db60fa961138bcb28a1d2180857f3630b173c5561beab955ed9c93cbdff2da1384","first_seen":"2026-01-29T07:01:16.11173Z","last_seen":"2026-10-10T22:22:36.381365Z","times_seen":37,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"feratotogaz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}