{"report_id":"2ce18662-c44b-4b7b-97d2-a1cb4b690444","version":0,"status":"done","tags":[],"date":"2026-07-17T09:30:26Z","url":{"schema":"http","addr":"sancaktepeklimaservisi.net.tr","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":0,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"title":"Padişahbet Giriş | Padisahbet Güncel Giriş 2026","dom":{"size":26237,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1403)","md5":"0ab9254de83e417c429f1d08ad939f9f","sha1":"cbac7b67a1d5c728230b097aa40e77f0c8cd0d8d","sha256":"4d9ed45e9934e3c59a52a81395705d121389c69d859a5210361329dbf53f5c7c","sha512":"d9b9ec25f5483164f5edf8d3ef983c47f8a64704d63aee33ea5f7f587926541d16243e9d69f5b699fca853f0915c6a5df5ffa4411044a15ba0b728654ecd1c50","ssdeep":"768:DUzpAtwgQDypxYlQFMiMbgYdm5wAgD5UPHl2KJ:NT/m0hOGwHAz","tlshash":"b1c2f90168f5a53f037762c59053af1f68c7f353ca26a1467a1e4f731f9ad918a1322e","dom_hash":"domhashdd1fda74111ecf7017fe7e7a659d5e5f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sancaktepeklimaservisi.net.tr","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":0,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:30:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"sancaktepeklimaservisi.net.tr","ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-07-16T12:34:16.424429Z","last_seen":"2026-07-16T12:34:16.424429Z","alert_count":24,"request_count":8,"received_data":126663,"sent_data":4189,"comment":"","tags":null,"fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"megaserverbust.online","ip":{"addr":"176.125.241.208","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-04-29","domain_rank":0,"first_seen":"2026-07-10T15:37:25.646547Z","last_seen":"2026-07-10T15:37:25.646547Z","alert_count":0,"request_count":1,"received_data":377,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e929e3e15bce0c074c75867c910e414","sha1":"70dae9926225239a5ac88df2965e477fdc9e2acb","sha256":"52fb3320997f97571055eb47b9ea9d48cea20bd5ccb74163cca9313a8e5e5711","sha512":"d027abb11dcab72f5be20003111c87c0e8846fab235268ed2a2ce84da684b6a7178d99cf826f14c1f6c5585f182edc2bbfcf513495e9c4b3433ebfbac29953b2","ssdeep":"","tlshash":"c5c022fa700254004b6f1058913a1b0ed0ab02378ce908028d130a800710f198a833a4","size":190,"data":"","first_seen":"2026-07-10T15:37:29.755511Z","last_seen":"2026-07-17T09:30:27.080705Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/assets/js/main.js?v=ahqswl","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d3b07c8b1b3c01f6a47261d29497b33","sha1":"f3d6fea429000d9e007c0525f4589099e3c802d9","sha256":"fd2192dbcbecc7c82a6dd4fdcc6ca6aae4f99c2d01a147b4521c282fe11e4f92","sha512":"4460a9e807c4a927953e9f43412ad414a06b5243daf6f8dc161fef612d5759d6012b9f8bd9454019297f86ed9fca6ac568de584c1a77a090c44517b193332715","ssdeep":"192:SPbFkHuizRw00rmzAGzSrldTxzPEYwAHXNmb97S:SPbFkHTlw5rGASS5HX0Y","tlshash":"2812a36a62f71039896b40f86bd7001972722087314af9057b5eb2156fc7bb842f3bf9","size":9390,"data":"","first_seen":"2026-07-10T15:37:29.741043Z","last_seen":"2026-07-17T09:30:27.07773Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:29:58.528Z","timestamp":1784280598528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sancaktepeklimaservisi.net.tr","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 09:50:01 GMT","end":"Wed, 07 Oct 2026 09:50:00 GMT"},"fingerprint":{"sha1":"18:EE:3F:C9:AD:59:53:F7:74:21:96:66:F3:1B:1B:81:0D:44:10:E3","sha256":"75:93:62:62:04:4B:3C:EB:C5:7D:F3:02:53:30:20:53:EF:33:D2:1C:50:13:E7:60:2A:F6:03:ED:88:DC:4A:54"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sancaktepeklimaservisi.net.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:29:58 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26180,"size_decoded":8292,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1403)","md5":"14db77300c1803dca100f783b7edb025","sha1":"dad3a2dd8428653632912d5273674404bb3d0937","sha256":"b8f38077392b448ab8a40637a4a44c76d8814f6b6567df8628fd443e1533764e","sha512":"6c8397f51042b9c9c6b54a969c035aa2d4310fd5310018c07112036888b1c5aeb17d71339e4149d68aea23c09b28632e0836c5f15406f21f9bac63d21edc6d8c","ssdeep":"768:xTHUl6wgQDypxYlQFMiMbgYQf7nAgDeUPHlczg:HT/m0h7DnHXd","tlshash":"acc2f80178f1a43f037762c59053af1f69d7f353da26a1463a6e4f231f8ad918a5322e","first_seen":"2026-07-16T12:34:19.674702Z","last_seen":"2026-07-17T09:30:27.07408Z","times_seen":3,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":226,"connect":31,"send":0,"wait":45,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/assets/images/hero-thumb.webp","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sancaktepeklimaservisi.net.tr/","date":"2026-07-17T09:29:59.432Z","timestamp":1784280599432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sancaktepeklimaservisi.net.tr","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 09:50:01 GMT","end":"Wed, 07 Oct 2026 09:50:00 GMT"},"fingerprint":{"sha1":"18:EE:3F:C9:AD:59:53:F7:74:21:96:66:F3:1B:1B:81:0D:44:10:E3","sha256":"75:93:62:62:04:4B:3C:EB:C5:7D:F3:02:53:30:20:53:EF:33:D2:1C:50:13:E7:60:2A:F6:03:ED:88:DC:4A:54"}}},"request":{"raw":"GET /assets/images/hero-thumb.webp HTTP/1.1\r\nHost: sancaktepeklimaservisi.net.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sancaktepeklimaservisi.net.tr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\ndate: Fri, 17 Jul 2026 09:29:59 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8862,"size_decoded":9023,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x497, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc47299a9008a255e51dcb81d734fe8f","sha1":"758337202f1998fc93a911c2d1e83c7e6634fc0b","sha256":"c618bf624674871636b8a0e389d7582e15b5c59c8a342b4dedbab12c75042d1e","sha512":"755bd9f94f4ae827528e506d865c73b7bae693a578d439bfe53fa520628984ac9018d70ee1602c5b76c34469052b0200a514a7cce6ff990a433bebbb84b730b4","ssdeep":"192:mecccIWslwxDMKc9dhu1XD1Jkuu/2RKkbzWyHF9okgs8HaaliU:mecccIkxDMKudhETd7NbzWO4oxaAU","tlshash":"4202ae71c391b9c8ce38817a3134fb3d5c677131285dae6fb0eec42de028207a569176","first_seen":"2026-07-10T15:37:29.748164Z","last_seen":"2026-07-17T09:30:27.074754Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/_api/track?t=visit\u0026s=direct","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://sancaktepeklimaservisi.net.tr/","date":"2026-07-17T09:29:59.439Z","timestamp":1784280599439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sancaktepeklimaservisi.net.tr","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 09:50:01 GMT","end":"Wed, 07 Oct 2026 09:50:00 GMT"},"fingerprint":{"sha1":"18:EE:3F:C9:AD:59:53:F7:74:21:96:66:F3:1B:1B:81:0D:44:10:E3","sha256":"75:93:62:62:04:4B:3C:EB:C5:7D:F3:02:53:30:20:53:EF:33:D2:1C:50:13:E7:60:2A:F6:03:ED:88:DC:4A:54"}}},"request":{"raw":"POST /_api/track?t=visit\u0026s=direct HTTP/1.1\r\nHost: sancaktepeklimaservisi.net.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://sancaktepeklimaservisi.net.tr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sancaktepeklimaservisi.net.tr/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 404 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:29:59 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":8186,"size_decoded":2801,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (763)","md5":"b113c8c288340435f76d1a3e305db0de","sha1":"f07f898117ab8ece7ba6e5e68693551bfdad4b52","sha256":"36f9bcdae81621a13968d353327df05e1234bf1435c8614a60f75af724850bc0","sha512":"7e86cc39fb04020f22417faf9a13753b90b2f85d0e5788e1acb59c71b4e7841f986998a6127627c8f0ddb87a058444ea99c71923a4b56876c46f1821bde1db09","ssdeep":"192:pZxkwETW8AUXVX6wgQDy9rxzUelu5br6008Mbebkruh4hn:iwETJAUlX6wgQDypxzUeluFj08Mbt249","tlshash":"31f1f817a9d4b43663a772481117fe0edad2f223c95a6850765e4dab0f82fe40d2326d","first_seen":"2026-07-16T12:34:19.667388Z","last_seen":"2026-07-17T09:30:27.075425Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/assets/images/favicon.png","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sancaktepeklimaservisi.net.tr/","date":"2026-07-17T09:29:59.476Z","timestamp":1784280599476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sancaktepeklimaservisi.net.tr","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 09:50:01 GMT","end":"Wed, 07 Oct 2026 09:50:00 GMT"},"fingerprint":{"sha1":"18:EE:3F:C9:AD:59:53:F7:74:21:96:66:F3:1B:1B:81:0D:44:10:E3","sha256":"75:93:62:62:04:4B:3C:EB:C5:7D:F3:02:53:30:20:53:EF:33:D2:1C:50:13:E7:60:2A:F6:03:ED:88:DC:4A:54"}}},"request":{"raw":"GET /assets/images/favicon.png HTTP/1.1\r\nHost: sancaktepeklimaservisi.net.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sancaktepeklimaservisi.net.tr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 09:29:59 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2233,"size_decoded":2393,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"228e7ac063424e473bcaef538fcdf358","sha1":"56175fed0fa7f0f32c9aabb599d574db55f36abc","sha256":"c3b52c13e8d7df8d0d19743b0ab167f465fff177754b66f952258888d6607c8b","sha512":"e4d04d619767021d49b0c1da4a96d1b738519e9f794b22bfd8dcd1586ecfd84570d53ab38ff3bd0aa2ed53fd6b52e69818ec3afcac37807dfe182111a88067c0","ssdeep":"","tlshash":"13412be1e33e60786fe20c12971d5a15301a8091d18e76a499e9795cda06a2c0ce0121","first_seen":"2026-07-10T15:37:29.752111Z","last_seen":"2026-07-17T09:30:27.076006Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/assets/css/style.css?v=ahqswl","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sancaktepeklimaservisi.net.tr/","date":"2026-07-17T09:29:59.110Z","timestamp":1784280599110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sancaktepeklimaservisi.net.tr","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 09:50:01 GMT","end":"Wed, 07 Oct 2026 09:50:00 GMT"},"fingerprint":{"sha1":"18:EE:3F:C9:AD:59:53:F7:74:21:96:66:F3:1B:1B:81:0D:44:10:E3","sha256":"75:93:62:62:04:4B:3C:EB:C5:7D:F3:02:53:30:20:53:EF:33:D2:1C:50:13:E7:60:2A:F6:03:ED:88:DC:4A:54"}}},"request":{"raw":"GET /assets/css/style.css?v=ahqswl HTTP/1.1\r\nHost: sancaktepeklimaservisi.net.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sancaktepeklimaservisi.net.tr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:29:59 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14116,"size_decoded":4135,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"bd4178de329a0f92c9e7f45d18607700","sha1":"4ce0c323f8bb44ae78b11ceebb77221a64f5cfd8","sha256":"754cfa27435b210b4eab4a01ba588c35f45232168278666d3fb495fdd5457230","sha512":"e1dd5d6b7561a6d6190d3b3518557da2890133216efb7b42e4be1d30b9ef3596cc314e87d4adff9f4e54f0f2b7acac288a7e63bc79f6fe32aadc12f5fe61dcca","ssdeep":"192:8XLIc63kTOlNNmtvIaaDjDjfoZvWEhDTHZ+7uTnt1TO0MESha6B5rBpQDxTe+TpA:jYOxyvr/AgK03wrER5je/2MKG3470qO","tlshash":"8e526e61f302021c7037c18a19a7869fb379a012d622da6cdfb734ad9eca1dfd675a04","first_seen":"2026-07-16T12:34:19.668741Z","last_seen":"2026-07-17T09:30:27.076864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/assets/js/main.js?v=ahqswl","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sancaktepeklimaservisi.net.tr/","date":"2026-07-17T09:29:59.111Z","timestamp":1784280599111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sancaktepeklimaservisi.net.tr","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 09:50:01 GMT","end":"Wed, 07 Oct 2026 09:50:00 GMT"},"fingerprint":{"sha1":"18:EE:3F:C9:AD:59:53:F7:74:21:96:66:F3:1B:1B:81:0D:44:10:E3","sha256":"75:93:62:62:04:4B:3C:EB:C5:7D:F3:02:53:30:20:53:EF:33:D2:1C:50:13:E7:60:2A:F6:03:ED:88:DC:4A:54"}}},"request":{"raw":"GET /assets/js/main.js?v=ahqswl HTTP/1.1\r\nHost: sancaktepeklimaservisi.net.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sancaktepeklimaservisi.net.tr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:29:59 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9390,"size_decoded":3254,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (450)","md5":"2d3b07c8b1b3c01f6a47261d29497b33","sha1":"f3d6fea429000d9e007c0525f4589099e3c802d9","sha256":"fd2192dbcbecc7c82a6dd4fdcc6ca6aae4f99c2d01a147b4521c282fe11e4f92","sha512":"4460a9e807c4a927953e9f43412ad414a06b5243daf6f8dc161fef612d5759d6012b9f8bd9454019297f86ed9fca6ac568de584c1a77a090c44517b193332715","ssdeep":"192:SPbFkHuizRw00rmzAGzSrldTxzPEYwAHXNmb97S:SPbFkHTlw5rGASS5HX0Y","tlshash":"2812a36a62f71039896b40f86bd7001972722087314af9057b5eb2156fc7bb842f3bf9","first_seen":"2026-07-10T15:37:29.741043Z","last_seen":"2026-07-17T09:30:27.07773Z","times_seen":4,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/assets/images/logo.png","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sancaktepeklimaservisi.net.tr/","date":"2026-07-17T09:29:59.112Z","timestamp":1784280599112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sancaktepeklimaservisi.net.tr","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 09:50:01 GMT","end":"Wed, 07 Oct 2026 09:50:00 GMT"},"fingerprint":{"sha1":"18:EE:3F:C9:AD:59:53:F7:74:21:96:66:F3:1B:1B:81:0D:44:10:E3","sha256":"75:93:62:62:04:4B:3C:EB:C5:7D:F3:02:53:30:20:53:EF:33:D2:1C:50:13:E7:60:2A:F6:03:ED:88:DC:4A:54"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: sancaktepeklimaservisi.net.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sancaktepeklimaservisi.net.tr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 09:29:59 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45718,"size_decoded":45878,"mime_type":"image/png","magic":"PNG image data, 512 x 283, 8-bit/color RGBA, non-interlaced","md5":"6f41641818b5206b41a65e9c90a3ebae","sha1":"7ca1be220b895e5d57f33ee27c0a36a8fef94545","sha256":"3b1a9368eed2ca0837f67b621e53766283d429a6b85d0e0aa8d7d127862e454d","sha512":"aa5e052ac4196097b5e068acae6cd18d846480ebd49ec1367a1af49411595211f307350cc0b93360427df4e3acf181e5d77fc7c95b5bd7561134e68cdae6d769","ssdeep":"768:0pijmq4V1imk40E8tMejSeu7hyYbEOQDd1FzldlEHQtywbyjd:9CtTkLTSeu7xbEZ7tlu7w+","tlshash":"f523f142c2a4dc0cc4596d2d433fb207e0da64572eb4d84846de55e2e9ec06dcebaaf8","first_seen":"2026-07-10T15:37:29.754412Z","last_seen":"2026-07-17T09:30:27.078823Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaserverbust.online/ingest?d=sancaktepeklimaservisi.net.tr\u0026t=visit\u0026r=","fqdn":"megaserverbust.online","domain":"megaserverbust.online","tld":"online"},"ip":{"addr":"176.125.241.208","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://sancaktepeklimaservisi.net.tr/","date":"2026-07-17T09:29:59.429Z","timestamp":1784280599429,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaserverbust.online","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 00:58:45 GMT","end":"Sun, 27 Sep 2026 00:58:44 GMT"},"fingerprint":{"sha1":"5A:8B:79:07:75:24:7E:ED:BE:8A:35:BB:25:28:E3:FE:42:2E:EC:3F","sha256":"6E:85:78:F9:05:B4:E6:16:B0:9D:B6:62:23:35:0D:0C:E1:04:C3:0E:BE:2D:95:0F:65:2D:9F:7D:60:9F:02:98"}}},"request":{"raw":"POST /ingest?d=sancaktepeklimaservisi.net.tr\u0026t=visit\u0026r= HTTP/1.1\r\nHost: megaserverbust.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://sancaktepeklimaservisi.net.tr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sancaktepeklimaservisi.net.tr/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 17 Jul 2026 09:29:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":377,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-07-17T14:41:40.964513Z","times_seen":94199,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":60,"connect":8,"send":0,"wait":17,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sancaktepeklimaservisi.net.tr/assets/images/hero-bg.webp","fqdn":"sancaktepeklimaservisi.net.tr","domain":"sancaktepeklimaservisi.net.tr","tld":"net.tr"},"ip":{"addr":"38.180.232.55","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sancaktepeklimaservisi.net.tr/","date":"2026-07-17T09:29:59.431Z","timestamp":1784280599431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sancaktepeklimaservisi.net.tr","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 09:50:01 GMT","end":"Wed, 07 Oct 2026 09:50:00 GMT"},"fingerprint":{"sha1":"18:EE:3F:C9:AD:59:53:F7:74:21:96:66:F3:1B:1B:81:0D:44:10:E3","sha256":"75:93:62:62:04:4B:3C:EB:C5:7D:F3:02:53:30:20:53:EF:33:D2:1C:50:13:E7:60:2A:F6:03:ED:88:DC:4A:54"}}},"request":{"raw":"GET /assets/images/hero-bg.webp HTTP/1.1\r\nHost: sancaktepeklimaservisi.net.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sancaktepeklimaservisi.net.tr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\ndate: Fri, 17 Jul 2026 09:29:59 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10436,"size_decoded":10597,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x596, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a3a9d461f86d70ca69f79ad7027bb266","sha1":"9fff35f2a19b7ffd07787bb0bac231a250c85981","sha256":"ee4042adc4da3d274c9cd677f4d4f5cdd11446b6b2c6af25b1a093bdab4ee6b1","sha512":"c271302013799e6b9d2c580b89b14179d5d9fbea8ee66d6cf0d98cfc024190f6a3001f5d6b12c12de4f8f02c82d9db6eb25dd71721407ebf24189f01808fd202","ssdeep":"192:pNDJZht/zCTj7UoGKeUWWepVb1t5DNb+DZgJLDic:pN9hU5+35l6Zg","tlshash":"90226b54992f0fb7e10dfaf43a559ff791fa9007d01ae45f2898c277b92862b6581033","first_seen":"2026-07-10T15:37:29.745718Z","last_seen":"2026-07-17T09:30:27.080105Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"sancaktepeklimaservisi.net.tr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"sancaktepeklimaservisi.net.tr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}