{"report_id":"37a0feb9-ac28-4722-a39b-b9009374f673","version":6,"status":"done","tags":[],"date":"2026-05-17T10:20:15Z","url":{"schema":"http","addr":"mobilbahis.com/","fqdn":"mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"13.249.8.51","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.mobilbahis.com/","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"title":"Mobilbahis | Güvenilir Bahis ve Casino Oyunları Sitesi","dom":{"size":47224,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (677)","md5":"1a966ae5bdf5b9fdc11439f92a59fa1a","sha1":"79f6aa486e3db4a76ca8729807fd3f010a6b2f7e","sha256":"89cfc956ea64563ee408ba8d0fd79073dd8d5de26e8926737f32777e6dab95e8","sha512":"dafdda0952df310412f5ae0e9c40ad90e86fbe815fab4f7cd8d984429c8e5d51c49e8e0ee1099ad0342b97ca211a283b6115b6cd81993516f5fe849a8fdf81b0","ssdeep":"768:ErLF9pUiv8IFDFmUZ8FmfACFmgSFFmLKCFmRAmFqiM:E31Usmu","tlshash":"a023831b75f7310b6503d5a867bb2b056ba8d003c11ace18be9c57889fc6da39da374c","dom_hash":"domhashfa9272d4fcd2df026a930c7c2f0477bc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mobilbahis.com/","fqdn":"mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"13.249.8.51","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T10:20:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mobilbahis.com","ip":{"addr":"13.249.8.18","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-01-23","domain_rank":2964446,"first_seen":"2026-04-28T16:47:55.034908Z","last_seen":"2026-04-28T16:47:55.034908Z","alert_count":2,"request_count":1,"received_data":47646,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.mobilbahis.com","ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-01-23","domain_rank":0,"first_seen":"2022-06-03T05:52:26Z","last_seen":"2026-04-28T16:47:55.603984Z","alert_count":72,"request_count":36,"received_data":403606,"sent_data":16519,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.mobilbahis.com/","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"37c586b6c5016815997ab10134e0bcb1","sha1":"9cdbdf74ab7255a7daa1b79fd45f7d94752bc502","sha256":"3a6486b0f8e636d2a14afbebc9ba49aa93dbdef4dba86af63c3e91b0074d0f53","sha512":"9f3e24eea33c690917408907db07f9044c910e8c56b20e14d79dacfa73c82c905a8aa121fa4b8326f74a06606b4a9635692a5823a577d463565f20f73679fd1b","ssdeep":"","tlshash":"e0e06820f4273575026742da528bade03290808ef080d576344cc28d0fc27563d96afc","size":380,"data":"","first_seen":"2026-04-10T05:53:06.759542Z","last_seen":"2026-05-17T10:20:18.400455Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.mobilbahis.com/images/logo.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 13:05:13 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 25VII4ASddQSeqj9jCiLPYs9KzbUTim1_-UIl8VxB8XJsFvcUTxkVA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5845,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b30e0aea8b74bbf8e6632c3e85b20037","sha1":"ebe347779a5d53d50b1d968e62dd462b037b8c45","sha256":"f5f32bff501ffa0f7b51ab3b9a0851781b1b919a655951d6b8caf8c0781b22fa","sha512":"4b79e0d92ff8500f03f493d6ef85e4c787dd09918e9c399eea56a4af35781b38ddcb5d5b910f62e57e5aca1be7eb80635a03c8b5e02ff7dfc941e1b9f0e42ba2","ssdeep":"96:fQHjpBNKwHMZ6SSmSxnvtE1sUgUnvn0TFguxjFsCu63cs1903TeVoJ6/95kgx97:fQHfNTwhmnFvU9nP0TFguoZ6zgKkgj","tlshash":"06c1d0ab4f1064c4a89b76aded1b098e1d95f0fdfbd2939ca22c9eb300e25cdd111954","first_seen":"2025-04-15T08:22:48.24205Z","last_seen":"2026-06-11T07:50:35.782816Z","times_seen":11,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/social/tiktok.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/social/tiktok.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 6DuYJ6PXwlefjsKopq3obVNYb5T94T96Gl0KLcVkb4NpRGQ8cFb1ow==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75642c20307aa38b2059a379a8fd095a","sha1":"af9cf36bdce29d60018e62b5c6295a0399c18080","sha256":"89ca8f5025c27f432dd9fd06b983fe119b11e6b33d26497c25bcb4c7b2008f62","sha512":"d73db505928e41afc1f143c66eb8949e6cd03c1fd8578284889cc45bd836b955b4ac58ca3d1dd3369056cd7e784ec0194d95cffa2d3879befccd388d32645108","ssdeep":"","tlshash":"7521f1d0d3e893f4f68997290097d879f54239c96684e9a9cbb11c41d6d400c7e1b8d7","first_seen":"2025-09-05T11:34:50.169196Z","last_seen":"2026-06-21T07:06:28.30503Z","times_seen":25,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/ios.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/ios.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1903\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 6LMMTNtzyKPJz0jLnSGPB2atu6QTbioFb8-sIBF1EQrGAmP7suHSeQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"61cca59d51812ac448678f20559199d7","sha1":"4081701338e3f4323eeb4befd71204fa35253352","sha256":"da9465b91a55cab6589aef6d2a64e43021ac98ae9dad86e2d71c6162c920e045","sha512":"fa6fd27add6ad653bd3d79bd53f8305924f02bbfd1e73a107569e6e52fbbad5d0a0ed1cb00c5aaeac6cd6ff242d15bbab082d690102bee82fab7a3f050c304a7","ssdeep":"","tlshash":"1041096d77e01874d0acc3380550830f2328b3a951bb47b6c742b48ed92439bce26e44","first_seen":"2026-04-10T05:53:06.743231Z","last_seen":"2026-07-15T14:25:55.387979Z","times_seen":13,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/android.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/android.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1775\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Zsnn6UQvxbHsJg-0NgdWa6kGQ-g-LE5EzGYDNOBArYvlu3fPoG-qww==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1775,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6295413b8574d2edf3759c22a503826c","sha1":"15a3be52ff5dcdf98f96ff074264467b97c6ec68","sha256":"001f99be643bb0375a617dec8345fa2b01aaec4fc55964e79b15bb9a1d752f94","sha512":"facb1dbdd8698aaa3cd549779ef08d517b3d2280cce8c73c13a86b05e4681c676e6ff7760832f56c9f1ffb85996b649c21a34b34651409e02c30b9c6ce38bb24","ssdeep":"","tlshash":"2f31d60a27181e37e81c47b6ef8d9b062375413d86a3476a70506601ae74bf2aa7ac64","first_seen":"2026-04-10T05:53:06.730861Z","last_seen":"2026-07-15T14:25:55.385718Z","times_seen":13,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/visa.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/visa.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1666\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: WFSO-v2vS5C06tqkU7GacrOPTLNJWnmDYuIsYqRlzHckF5vZNW-fnQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ec3b0c39c6a067b5cea62814d8a2f7ae","sha1":"09e1a466a41bf5eb2c192873ea13f1e3db6cd43d","sha256":"f77c8f9f82bba4c6bcae7dad715241bd9f420db300f80e6cd43b54a2e6522e3c","sha512":"5f7e7e25930e59a957fc46ee5e42db83aa2fd96ff786c1b1d6dbccc62220d2b826b1c13053d060cdf64a732e66322df05a4aad56c982f0670d5a28ac3f22f78d","ssdeep":"","tlshash":"d9310a2567b44c0adeed0334595f03ab37923375ae371f5944817514628419bfc0d374","first_seen":"2025-03-03T15:43:16.00303Z","last_seen":"2026-07-19T05:49:57.35961Z","times_seen":77,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/favicon.ico","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 13:10:15 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: toYqb6GH2_yx-TSBGqdrDDSYOedz4m4Ev8t3BwvX2AFXfwlPqFiF7g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f57ce9c1da8238f3b890d4251ca5ccd2","sha1":"38fc852ce16d2b63708117de5e5d243b591f55d4","sha256":"7950944e970551411dd7e02f8ac20e332aaf7e6f5596af98a62e682373c26dee","sha512":"3b0f69482359fefc8b63aeda4f132223832d7bf573fcbf6bb58dfd9390996b392574eadb8cc77686ffe5d1060443d96b03d7670105b22f6eba2caa836a0c6081","ssdeep":"96:jcPZIXM4SS3ubHLFJjWy6QbsYC+pAMC863v3:jcPZIXMJLFJjMQby0Ab93/","tlshash":"e7623246e1c9fb42d3929cb100d6e21c50b8bc21bf897b5cd1b9363f178bb9e2e54681","first_seen":"2026-04-10T05:53:06.757374Z","last_seen":"2026-05-17T10:20:18.363862Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/bitcoin.webp","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/bitcoin.webp HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 8124\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: SOHkLY7_IytBVmnQJyBkD7CZSmb79nEacjC6y331VmrIMieUCgKr5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8124,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8bb7ed00973fa68768b59c7109fb333b","sha1":"79ca7d88a35b326bdd77ad3eb9004d13b9a15646","sha256":"406b6dc183d90e9ad54e08b2a2d06635b8ec7a568052eafdcfec299a8a5b3bec","sha512":"8c4c686e4f29d6f88f1208a82b233f6f589b1240b4f714f7a19a70d284c0785da74c9803a9db360c14d8df5d622c46790b1692dc766aacf1defaa4b6e030facb","ssdeep":"192:RwT0F5BVbjCxzHnG+n0N8syxQDZb7ONelzYTk8XiS0tXIdH68+RnUQP:RwTrxzB0N8syxQDcMl2B0kH68qnZ","tlshash":"a4f19e2f2a70bb50f02968bb0cc19745012d7cb6ed6c9e890ad889034a43ba365dcec9","first_seen":"2026-04-10T05:53:06.738937Z","last_seen":"2026-07-16T05:53:11.527461Z","times_seen":7,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/social/telegram.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/social/telegram.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: WncgyHI60EYjcqzf1xSvFE5Mdea-F0xyASf7a-DzG8kvePyTYj3dZA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29b59d5e38b0e95bc397201726a4e3eb","sha1":"5770f2da34905e5f403399993dc166d8660afc46","sha256":"fe50970be45daf5ada46f5f03b52a63a0db80810ef6165587a2de42a88b58994","sha512":"e07cc429f8a666e9e0a53f03555b520cb1c5c2a3e48f971bad478e822203552a8a7fe2c3d23a30d40a3ce7187fabe1fed1c7fa3af38e44ec04e3eb729f3a5c57","ssdeep":"","tlshash":"b52166e40355c3fcd142f77aa63fa5365e0314f179044919ca40af11aad15892a46ed3","first_seen":"2026-04-10T05:53:06.753115Z","last_seen":"2026-07-15T14:25:55.396368Z","times_seen":14,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T10:19:52.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 05 Mar 2026 12:28:15 GMT\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: filesystem: https://cdn.ampproject.org https://*.google-analytics.com https://www.googletagmanager.com https://widgets.api-sports.io; style-src 'self' 'unsafe-inline' filesystem: https://fonts.googleapis.com; img-src 'self' https: data: blob: filesystem: secure.gravatar.com cdn.ampproject.org ampproject.net *.wordpress.org s.w.org *.githubusercontent.com https://widgets.api-sports.io https://*.api-sports.io; connect-src 'self' https: data: blob: filesystem: https://cdn.ampproject.org https://ampcid.google.com https://ampcid.google.com.mt https://ampcid.google.com.tr https://*.google-analytics.com https://*.hotjar.com https://*.facebook.com https://*.gstatic.com https://www.googletagmanager.com https://fonts.googleapis.com https://widgets.api-sports.io https://*.api-sports.io; font-src 'self' https: data: blob: filesystem: https://fonts.googleapis.com; frame-ancestors 'self'; frame-src 'self' https: data: blob: filesystem: https://www.googletagmanager.com https://*.google.com https://vars.hotjar.com https://www.facebook.com https://widgets.api-sports.io\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Xy3orZHAE8ImxJLcO9CXx0c7vRie6dFNT3Qii31QKi4gDANxnOXsew==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47261,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (677)","md5":"ec9dd5cc651adbad7375f7477638dc1e","sha1":"d5261c0d567e78d99485b9b51e9df2a0d87c47a4","sha256":"3bad616ea528453c37c244cb2a531adcecf11a3cbefce0e2bab56e7ba7452c22","sha512":"c9418917a688aec4f9ce3b5bc3e565cb5c316e6350c94ec9367b019ce13131b65f720ce073e30e2dc0544192ae12f49a15f5f93a99c026ac371c1895c488eb15","ssdeep":"768:prLF9pUiv8IFDFmUZ8FmfACFmgSFFmLKCFmRCmFqim:p31U2m8","tlshash":"3c23841b75f7310b6503d5a867bb2b056ba8d003c11ace18be9c57889fc6da39da374c","first_seen":"2026-04-10T05:53:06.736434Z","last_seen":"2026-05-17T10:20:18.368797Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":601,"dns":26,"connect":5,"send":0,"wait":69,"receive":0,"ssl":567},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/master.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/master.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 87OTQM-v8SGRJc7YvPmOGrYEqaWGOvuC7J4zEF96cL-q1w2fv2zq1A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2284,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12eb73648b13d8cfc12f6ad3a3734bbc","sha1":"99a2bcb9dcc88d03d2447d6bd29f5ac0d6333d11","sha256":"405181916badcb64f256acefc90171f24dc4ac0f3aba78b43e7471d64450019f","sha512":"18ee7fb79217d6f7a57a192ede2a3d2915f24a83ac4017e43654f27bbe57ad69e12451f348a67bc5fc7388c30e9fe867a09ce630fcd7468b3f450be7d47a3764","ssdeep":"","tlshash":"cc4183ce23fbc17ca4449d5f3322281b471f705ad6c60268e1d7d71573173e48626952","first_seen":"2023-05-17T00:55:32Z","last_seen":"2026-07-15T14:25:55.373521Z","times_seen":58,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/18+.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/18+.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 14:45:34 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: aT3CdqVE-4EBm7KAJnM2hV0B6bOXhzu42gq87ZeMjAtrC4YgHpYtkg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1620,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5103a224b255d8d7228089a32dbcad3","sha1":"8a000a0234b6f7b7e62a10a5d8f67d5808908227","sha256":"c1cb53eac7026014f7de4b74acb682fd50efffa2aa9007a47afdc0396e2cbdb9","sha512":"e15e6a60a25a1047306ba294323c719a4750a6b75b7388b4e42bb31fe1b3a66e9eb6e2a3d1658459b153fc408804b45cd3a222f29373b74edf3c8d189cd2b65e","ssdeep":"","tlshash":"1231aee191ce6d6ca10543f0411a85351de72bd75e20dfa48fb0b939b92c86d9e420d6","first_seen":"2025-04-15T08:22:48.205908Z","last_seen":"2026-07-14T05:51:11.839658Z","times_seen":16,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 May 2026 10:19:53 GMT\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-23T23:56:51.480319Z","times_seen":36763,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":111,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/aninda.webp","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/aninda.webp HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 2784\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 4ybuyIPnYFGx1FkXlu4EVZjoEryjdzrf4JbvaJqF7F7gc3leeCzB8g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79b370ecf639c37ad629f30b73a68ff3","sha1":"22149172a48d31ff6114735aecd4be401bc2675b","sha256":"aca64fdfc7e74faf1a063a900f22f09389d306b28439f9b13221718a8fcbe623","sha512":"d1a80dcd06ab609233bd24b33e2a3cbded6344e205bc4edc8f8699bc073e83f95134e839b1f5e6d117abc5f6fcc7465e4e80503cc72f04c9db6fd1b94eed513a","ssdeep":"","tlshash":"47512b3e57102bd8e181567c35f50b03f7ae2c5277d7484bc252c31a9f2a8d7ad182c4","first_seen":"2026-04-10T05:53:06.746559Z","last_seen":"2026-07-15T14:25:55.375724Z","times_seen":13,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/ethirium.webp","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/ethirium.webp HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 4992\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 4a15EpBu9K4KIqvmZdLXe-BV2eiFBxXPp2EjbJODo1C4PFuRC0O1kw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ebe11162e0b7ffd491c111d437a0903","sha1":"eda1b0a5e9cd6595dc13e239e0a54c01ebf48c01","sha256":"8ee5fdb87326f7bb5c55e0188110727c2cd12f651f0515bfd90c01b0217f0cd6","sha512":"6baad93283b270577b09dc6d0e6766e3922531f7aafe50f282a86042b887f0edc2a0e524903ecb8d9f4e0f9e1aaee69cd0c05e5b0c59974f1960e04c2ff568ce","ssdeep":"96:8Elbw+iXKhYvRh+YwfvoRSJbMbiIzchg4BdWSJWLThYl69WRzKhIY97NNjX:JwT2lYc2SJ8hwhgmJW/a6tIY9zj","tlshash":"87a14cb3435047bfc9613a3855411f456fe6bf38271f6b0a1c4c43e18b6d9896fd9425","first_seen":"2026-04-10T05:53:06.713849Z","last_seen":"2026-07-16T05:53:11.602548Z","times_seen":7,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/kbahis-sportsbook.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/kbahis-sportsbook.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 14041\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 12:43:56 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: LQ75Uu_bZP3OU5XHa5h-hS8mS9aBbZ2aHcY2pGVzVgtwc9oa6X2C3w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14041,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"16dd05493fc8277c9ca8e9253ec0a7a0","sha1":"7c41b378aaa1164f5897a2110e93f6bf6d8f2b1c","sha256":"a5a67ebfa5589289f9739aa744e8b5007abda606ea5f726e2a95aab2db238a0c","sha512":"3ea97c03ae7e50300516e8990c9bba97a8424c4f4c87b9336d666a9b770f76275b8289a6024dd5551ce832e687532042bc82c4bba9b6048b03fde3cfd77be29a","ssdeep":"192:rGE738+OkqXXv4Yu2+29N92Vrqt0DadxRekLEGK4sEJ8qqKhTTjLYjZaOeZYPQqw:rbJef4YuX2Oqt0D2YeEh4zTwZUYP6EG","tlshash":"0c52c0e4e2988704f286bb7544ff0ce7243118958b679791d4ca43b8c52dc609eeeced","first_seen":"2026-04-10T05:53:06.739766Z","last_seen":"2026-05-17T10:20:18.374389Z","times_seen":5,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/RGF.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/RGF.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 14:46:03 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Scv0daif7OnqU9ZY91bKyHuvY91k4W-1uG3ummkzAy3ydUREDZUzQw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19614,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efdd0a08d2d9637c0adc8d4f88e70e44","sha1":"19998aa89fd968590a0be4ad6f64bebfa20d0552","sha256":"4c4c373fc59cffc03cd6a396f4e8603c1d14510bf1a2fc5f175a125261a439bb","sha512":"4d7f1045f5a30833c0ce9bac259e23a0e418b954a9a7ad208004eb0092226d07aa12ce7b41241eae9b987e4384a1e56ca05281f533782f046bd72d498aac020a","ssdeep":"384:TA/fAyxXdLZxAJKBvKByQwBn6LQpjQVZ33Ren05gsGW3ot9eMvPeKL6gF0IDq:ixxNdKsQwmp3Y9h1Pu","tlshash":"e492b6d9e3f4a3e07103e3f5ea128875f8670df9a957c66182959c12b94608ece58cf3","first_seen":"2025-11-28T04:22:50.739267Z","last_seen":"2026-07-14T05:51:11.816655Z","times_seen":14,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/tether.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/tether.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2172\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: aBvycUSDsT3ZUZXeXhoRtxo6jjWjZAcBZofmzgcEsNw9esMqDuBbww==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2172,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"80a130fd36730c0fd1eb5843d3501323","sha1":"606bbf66eb78a209048b66b5376b1c65ff3da46d","sha256":"6845228636aa871801acddcf0460977a1dcf850fe9d7b781c6447e612172cc71","sha512":"8c8ad57447f8f4149221fab158b948f38099e7df3c651a0148626b3a1bab1c0d495f584b1eefcf0cf0b6e0e12680cb2606c751d24b7f70c3740218e7f18c40ad","ssdeep":"","tlshash":"fa413e6b76686e16f06c1130845c4d146b701ad0635766f6dc43b262fe540c2dc47f4d","first_seen":"2025-03-03T21:34:49.67624Z","last_seen":"2026-07-15T14:25:55.370841Z","times_seen":133,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/paykwik.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/paykwik.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1765\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: uhc9umGOd9Z8HEHD4q3mxk60wBigeEQod0BgfRsI1gM6MWwRDDRcIw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8c56eebf2defa6f7f8e055b3ec72d0a9","sha1":"d1b2be85552a1af5ea7ecd29a1edc4f662e2d68c","sha256":"5a160f46049586d375d6cd69c24b6d5e6c8fa43a7c64faa67428581d5d449caf","sha512":"7a8ba73370ef02cc309b5719907c0e3a1d1d3374139def0a1c4c0f7c99e20423db60c62d8cd1171913112c48c2c8cffc6cf29684f396bf60dfec8ef6711bd64b","ssdeep":"","tlshash":"7e31b60c77683804d92d07bcc984876d617988e9ab970bafb8033428e6e0d3bcc69d0d","first_seen":"2025-03-03T15:43:16.148111Z","last_seen":"2026-07-15T14:25:55.394732Z","times_seen":140,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/master.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/master.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1040\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: vYETK4xpRTh6M29tW4mzH0JWwmyr_RO_bDjmbnuvBxv_r3tLjwH0Eg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"53fdd30549e55d1ebfef2d2bc9a61280","sha1":"bbf5356ebb29da9363bf33597931ee70642508f1","sha256":"d019333cfd19e1073b0a12130b5e82bb9cc38c4345c5c5d43bdc59ea6629b49b","sha512":"1d2f42e4e1156756f0068907b5d2d73bf9f5978b209978cdd062152c95a8528249705895063b00344a78845f91c5c74f81cc8204f6dd87d26ac438b27cd49670","ssdeep":"","tlshash":"09118455262a2ce2fc1c0b39045f830523387b2d53bb2b7ae946f5088634b76ce22e44","first_seen":"2025-03-03T15:43:15.894887Z","last_seen":"2026-07-14T05:51:11.796688Z","times_seen":72,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilbahis.com/","fqdn":"mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"13.249.8.18","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T10:19:52.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: CloudFront\r\ndate: Sun, 17 May 2026 10:19:52 GMT\r\ncontent-length: 0\r\nlocation: https://www.mobilbahis.com/\r\nx-cache: FunctionGeneratedResponse from cloudfront\r\nvia: 1.1 014a11ebf8efb524b8c418cda7b185d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 3P5HUMZyk0mJgi112ZGTYKRnGhuVfZ-dvLM7iiNwCn6ZbP0a9PF2mw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":47261,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":301,"dns":11,"connect":9,"send":0,"wait":11,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/mbahis-sportsbook.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/mbahis-sportsbook.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 13580\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 12:42:53 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: cV_LHbFXGI8_5E8lPBZYSMfz7DojjmtU9zzRvP4jY6YgRBrzHyYsxg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13580,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"07cb33e611d30c0d0f32e136523d8861","sha1":"46a38d0b6550070d5e1581c11a022b4dfb2a44f6","sha256":"493cfda053bb0d2988bf410df20d03ec15791ba0329a75ce9ba77385e750a3b6","sha512":"dc287210af4e6a2e0fcddb04d552d5cf8e1e41d27b90d30ddf91d4d62b2b838f4ecbd44b6eacd6216921e1b21cf3ff77be920931bd852ea69370b30eef2c2cc5","ssdeep":"384:rB5q44/gfJnVUUv2VZQ0ulEB+M62fRRtdc:d5FfJnarZFuKMfat2","tlshash":"0352df8f65951c48c89dc6f94f7dd24b2f94376401c51e6aea61d29ecce86662b4cc03","first_seen":"2026-04-10T05:53:06.734014Z","last_seen":"2026-07-16T05:53:11.605725Z","times_seen":6,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/MGA.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/MGA.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 14:45:18 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: VKOGtzNS5cRbJnbVO4vFfualxGuDvEH6T47AxYCibI3EZhfXbuMDqQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1667,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d063fb520489d9d126b41b42c032f60f","sha1":"d883997a20ceb33c816a4eb43018c24245c58ec8","sha256":"ed1ef8ba6c6a5eb82f6f7cd4e66c54ee11ae10616633fab9a35bb5648df8626e","sha512":"14196a355535376b270515b6d64d970df6e0c760f94de98db631ed33d48dff78315a2f9232fdf41d92afcacf2094f5890a955a33f59b710a2f4e871112745cc3","ssdeep":"","tlshash":"e03144dd93aa9278a454aba0c62910f8367f3cf4bf64c4bd03e1bd1b645144d1a8ddd3","first_seen":"2025-01-29T07:32:56.6557Z","last_seen":"2026-07-07T05:51:49.756429Z","times_seen":12,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/bitcoin.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/bitcoin.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2875\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: hf70EoOArUEa2kNLqGHVG_NyQTdJBXtk_h75V2klKR899sCACATbbg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2875,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3991569362b0487833939bcebc694c26","sha1":"7184b35a8877bd4dc61c7a879ee2ac7b1ce5a76f","sha256":"53254ba97e67534aa693847b8c2d1e4dd12ed1ab2ec964fa4129130b52a9cfaf","sha512":"c0db4b0e78b3a8d26dbda83389b05756df779caed14669fd207a057e37c3d83ff88452105713f9da6e8a56fcd018fb483307da527274129d17aebbba9ce5bf03","ssdeep":"","tlshash":"45515ba3b3f18f4bf23c2670838137af269d81022097690739e0a4128678e3bd215d0c","first_seen":"2025-03-03T21:34:49.651925Z","last_seen":"2026-07-15T14:25:55.39839Z","times_seen":162,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/general.action-banner-desktop_v4.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/general.action-banner-desktop_v4.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 117046\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 13:11:52 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xF2tkPz5e9SDxUjdaJbUFifX3TVyFx6L-iDVkscu_a7XB8fX5goNow==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117046,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"85fb93407ec388761135ac0b4fd48dea","sha1":"6a313e6b7daa6a4b37c6c637c23d0dd77db1dd46","sha256":"35f11a6f34b6333c519db6fc1de4ddd9b2be27b78142a2d2cb4c78ae1f64d3a5","sha512":"f53e0922448875a20d48903065728d97e2b04464ca11c14e46ffada8628976316b4d801516b0d20e691ecb490d862d5a9aa997d455fa189f5dddcf39c129aace","ssdeep":"3072:EXoKOQyWYTkjQfeg4qAWNXLu6W9D8OW8vmaR154OJOK3qHILog1t:PkyWYTkjQbEYXdWF8OW7u5LJ6HOV7","tlshash":"6bb31217a409b092f95136fe07e86f1bdf884999cf2880dc3b91b9bb1157d2e21116ae","first_seen":"2026-02-01T11:09:52.279903Z","last_seen":"2026-06-07T20:10:38.874694Z","times_seen":7,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/tether.webp","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/tether.webp HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 4918\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ues-lskVateLA5tUlGUuXGuafLrXmjasbcSIzv4t8MlubfIU-YZ08w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a2c74c210072f0f6581787959c174782","sha1":"3a5743f6c85c858d650d5ee56575db93f07f489f","sha256":"2181a296d66d11a8eaf5cf40e81faccdcbb2e33782f90f0f6fd6b34808e12b75","sha512":"cec976c0b8a395b2c8145a1a3bab2a34079b25a37a0a4057be21a6b0812967622b468047255da45d2bd07032b39c6a36d603316493e1d5648f15776b3049d1f6","ssdeep":"96:6Elbw+iX6q3pflUdwWEdXzUa0yktvZNBRM8mMXKnn8Ya2ww:fwT6ifecDGyktDBZlw","tlshash":"ada15c503730076cda76edbedcb60f53a7a1b7a99c6043788268036312be58a984d69d","first_seen":"2026-04-10T05:53:06.755219Z","last_seen":"2026-07-16T05:53:11.449349Z","times_seen":7,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/visa.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/visa.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 2rpPLK8Yd0Ok-YBYjTVqE7RRkNvbKjhhs-W7BYkyCAZoCJSmpP89jg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1855,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14c67e60f9cd8613b0bfbf0626e87b6b","sha1":"b459d86aa2b9aea7e1897672dd39c8ec372928a8","sha256":"1294dbbb1be8c1918d5d490eadce4be0901cbcbb2649d484d888f6d0cbf23982","sha512":"633ce354639e88c4fabd01c7bbb5c4d40bacc60b2d62d54d93e33c64f01e9b56fbcefdea89207ac1f4944656631e9757ecc841a41719b52d967f56369437491f","ssdeep":"","tlshash":"583197d47226c3b87ccf8225c11a45b33521b6b3f279a2f8c1d7ac84755f6d600a8ad3","first_seen":"2023-05-18T07:57:32Z","last_seen":"2026-07-15T14:25:55.372937Z","times_seen":54,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/live-casino.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/live-casino.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 18696\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 13:00:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ln64h9cyNV7PLvcrjo1Psx_ISWYmsFauJvk1Tw9o5T89uH98XQ5RMg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18696,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ca6c2a7679d3890958142edaac33c7f1","sha1":"d1a7b5a72044f27aa4315864c03cb6e7a8d48fb2","sha256":"567f658808d95429173a822283d433b4feab061d5788629b6cbb6eaface11df3","sha512":"c25a9e321679b71a0cad88354426a3402f4e7c4e2b33663f8b38b2e677f24d7a0801ca3d87ef79254d037494adeee54696915bc96a8d01bff52de7f3011e2f8f","ssdeep":"384:rjqds1A4tagNPSuE3s2JshR1Kg+XV17TCFSpQ1/p9saxDq9eI:/FKuE3lsD18JuFSGhPqAI","tlshash":"b782c0ccb18f0845ce26a9b1163da3db23b5bf23828319d7344c6a72db46a294c97159","first_seen":"2026-04-10T05:53:06.751371Z","last_seen":"2026-07-16T05:53:11.569195Z","times_seen":6,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/jackpot.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/jackpot.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 14689\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 13:02:42 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 40g0OwuFwsPldwk3-8k9SDphoPd3V-IBzXjtMzlWfO6p8O6OHCayTg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14689,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0747511e0f771c8c5da591d861baf0e2","sha1":"7f04e86150f725d3f681b110b523cedbeb6c83b8","sha256":"80e65097781201215c38356121620aff19d7658c7069dcd073bc4908a3e9f760","sha512":"8ba94ad008423c925d3b09a8fe9d68ca8b41f10e847067a15033b13667beb340014486dac1a28a0a2e50dbcf0ef2f7da4a0024fe438d1bd86598d70dd8a8b38d","ssdeep":"384:rj/OIFIn0fx8nlyq6Xdn5Y0VMzY3o4n/+V4V9:Hen0QlyF5pj7WSV9","tlshash":"c562cf9a4b32d906f84cad35872ee09020e7a9a5ce579ab77b03d8c588fdf5d0d50c4a","first_seen":"2026-04-10T05:53:06.747426Z","last_seen":"2026-07-16T05:53:11.484259Z","times_seen":6,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/comodo.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/comodo.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 14:46:13 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: _ayOJeNt5_mnzsCmaKKU7wcrmnJBQN1tWIY24PEzRagC9D01TEx8Tw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15814,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76d90cfffd948382119520ebe9906877","sha1":"4392166e4dc9d03db24e835ed4afd9d09823e9ba","sha256":"03e440f807464e78daf71238de16b1b9d92909f669f79f53086127d1ed66f366","sha512":"6916fc9cadb4b9e3cf9b25ba7bcb72ad17d1f339b5caaefd4d1f4c058fc47cd222dfe90e369fdc8762c9942bc0422e76369e7f5423181bf4b1c327d759ad94bd","ssdeep":"192:Q2I4rwToidIrXTCbB74l0ADfOmxHj+/LGxI375bNkQdG/xsMqB/lPQJMsovFL:QsiX4WslDpxHc375be/0lPeMswFL","tlshash":"47622796b7f333a456adeb5373e1243e360a23b47363c89cc3ae0ed4d69901d5e29851","first_seen":"2025-03-03T15:43:16.043028Z","last_seen":"2026-07-14T05:51:11.825255Z","times_seen":25,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/social/youtube.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/social/youtube.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 735\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jkJAnHxv02X856cysNhRFnhzN-DjX4ApbV3A5pAgQBSDv9LYyiaRUw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"281f951ff81a05df8a70047157f235c3","sha1":"42855cfb0095162ef8a43322ce6ae92c67e60b2b","sha256":"15884737c6a7511faafe1fabd216ac07523e9c39a5d6b40f93d7aed5325a5fed","sha512":"f9cf9bc6e839bf90ac94f82262d73b6a9a014a975c8fb4913b95100c6e2ab08fa5555c96034f16d77ce4a4ec3c4e41c1b69ce19e00ef196c2edf183b47ae57cc","ssdeep":"","tlshash":"db01cbf693c7fba4ea0405fe8ab8b8e72768ed897212a394c3721c1416549fd9c11dc5","first_seen":"2025-08-16T16:48:17.581756Z","last_seen":"2026-07-16T05:47:52.261703Z","times_seen":33,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/aninda.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/aninda.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: AqYUu789-ecjff7sPqPpTHDl3XxFxbpsdGbs-U1YJYdhSGqKK3KUEg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1777,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c1c77194e51ae370cc6b681854c69ca","sha1":"a469af5d6f1b2385bc8f45cb8b88d37ea7dee30c","sha256":"549c6909bbe5ab2c754fb22060641b2ea9c4e9a2e4032d49bd247a9ef85e357b","sha512":"533f49351404197171d72a57a6560d7413641b7419395528f529b4656b3215ab14e1d2f5522891ed64cf27894f4482634b1be49eb4c8b5af07db8b985edfa7ea","ssdeep":"","tlshash":"d931dea423056a49cc5333f8872ab075e97fc0d681d8d2ccc5e6aa36fc954de88addd1","first_seen":"2025-07-14T13:54:05.186798Z","last_seen":"2026-07-10T10:21:21.843245Z","times_seen":23,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/paykwik.webp","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/paykwik.webp HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 2914\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: zz72_EshI3_26D-aBn-pIZEnlA9jTEX9Iq9r2E2LWeSR53ydbxlroA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2914,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"628be5f0d2d8a45d9a3b7af0615a3f63","sha1":"4454c6165110a7095d259a138c2aad9d2c5fb6e1","sha256":"7fcaf648f5c52ff868e6db4b80001b2480ef778deef311abbf32d5af34fdf2e9","sha512":"0bffc65370c56a86f4c07bb3351434baa70eb8b08e4a075c50bb09c951d4caa55aff8344f1d12e18e495e4e7cc5991faf8bfa834b5e342ccb8afc96a222cefb1","ssdeep":"","tlshash":"c5511b3a33789bcdc1542274a9f39f45d26a3d1348d9fa2852c753f01b904d9e928e99","first_seen":"2026-04-10T05:53:06.731731Z","last_seen":"2026-07-16T05:53:11.515239Z","times_seen":14,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/casino.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/casino.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 21396\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 13:00:29 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: BmVn7aSn6cbRaCKpp6ry1Sw6KLflLv0xAEW396Krbb9mXxf9vLGGtg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":21396,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"773f5ec8c2d20a2199289d0f71b424e3","sha1":"1a026b2b62015c5262ea48c2c94dd6568f334659","sha256":"e9eeedc2490d8d8abd2d5827c209f4e95f6cbca308f62f1ad999a87e442acea5","sha512":"1fc7965e9bb5be0c0ae99d3906ccc219635c74e7c9e0cf03b815a68925c21aeaa95ab6e70b65965aea1b36a430eaf25068df635c11c5564807c6fcf4ee72e6d7","ssdeep":"384:rNo7b9PMg8+XTGpfKAJphmlylmghZ3sHPzGKGxa7Kz2HoRZGMeJ7o/Z/tnYuhXFL:EGNZmCmghNsHaHxaRpJ7o/Z/tnYW+pSZ","tlshash":"b7a2d07b9eec215df32505738ae2e139a3310869a4eb07801b681fb19d04f77cd85398","first_seen":"2026-04-10T05:53:06.735267Z","last_seen":"2026-07-16T05:53:11.459633Z","times_seen":6,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/mobilbahis/IBIA.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/mobilbahis/IBIA.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 17 Feb 2026 14:45:46 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0wwxilO6vDeB4WyjnVYE05UJHQpim_5WWzRYvsYs1XBMKmo8GY-2kQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25067,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97637148739fc17d99a86c35fe4a3ec6","sha1":"b90750587daae35da0e167307a71a5025c4b671a","sha256":"188a05ec4ada43a7d2fb0ae62cd0b23048fcf4b84ecf03e2fe6f4462eecf8552","sha512":"1e6d9fb771bbd15c1b6619f44dbbaacd0aed11bfcb1898f6de866c49a06d7a3ac07f7771e12c4e0a1fbc05217b20ea71fcb67f5d5cad6258bc85dfb6ad9e03ff","ssdeep":"768:SHeEOAbjK3t8geGVqGC2vFnd8S709z5zpv2jwq6fQM:ppCK3sGtd8p+ju","tlshash":"14b2945863a2d3fcf005bbf8992798707e5639e57a12c0adc7a51da2e57107c8cb88c3","first_seen":"2025-03-10T01:18:52.714058Z","last_seen":"2026-07-14T05:51:11.753676Z","times_seen":18,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/social/x.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/social/x.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: rZ5ZtnBmlk59LS71V3-fcRp7wiemBALgXfLHg-wCM6dFlnHzAPt_sQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"af4f09a18a8bbfeb469875006352a68d","sha1":"aed990a7fedd3b92e3301176078b7a07890c95ae","sha256":"4dfa1907a9264acdc5136d5b7697a71f8c1b744c9cbefb926a835fd87eac7a98","sha512":"f2887506e1d6c74f18cbc0ba6d6c2a950ae47d131778fe6cf1e7a1c6be70ab57ec6f3ac9c9f31decb0781743e0d80264a92d6780ad0781c75f0a516c489c9bf6","ssdeep":"","tlshash":"9b31a8e8d2c1b2e0fb05c3e09d35b665707f70fb76d5d64e829b2795d326be014944a0","first_seen":"2025-09-05T11:34:50.16639Z","last_seen":"2026-07-16T05:47:52.171968Z","times_seen":34,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/social/instagram.svg","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/social/instagram.svg HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 3Mdtcwp_aIJyZo0a_8J1M2q8BImtgz9iOXys4L8r673Vkw7TjoBMeA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3828,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"479fa535f5b2d789b103750f6e8eb63e","sha1":"572d73eadfb31654e11b8b3d4f0cc2b8466f6fcd","sha256":"ec1a727851536d2a3cb742633022eee828017613ee92f1b4a07c621f6f88ac1f","sha512":"e906bb24232f272267036b460541d2a7a508eba6bcfe38d82372b9d1d2f33017a3fcc34166eb991311d344dc2dbea1438a0691ac9ee02edfca54bcb58cf9af99","ssdeep":"","tlshash":"8d81614822baa3fcf520e2bd822e50667d833aeea151c52dc3756d10b97211c9e518e3","first_seen":"2025-08-16T16:48:17.642063Z","last_seen":"2026-07-16T05:47:52.232098Z","times_seen":34,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/aninda.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/aninda.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1875\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: -eHfXNgd7Fd20N0BOA1HSUWaiyKNLHH8TdQOs5K7hufnTcpHy1Cq4A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1875,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"beb81f5b7ad0b72a59f7e42c8bfd86b0","sha1":"f6f42aee43a12a38bc0d704a75862e53f984636e","sha256":"335a75234123cc4a58ebe14a7220b4fa553721e7d2844c70915e5a1771e52626","sha512":"f51b0fe1b9c656052fea687c5df73cc0257240868e771dd4819546b643d66fab384723c9168bfd517290ea5de752fe7ee5104b463476f1e73010928f3ab9f9d1","ssdeep":"","tlshash":"a231e90653702c96e3cd13b580471b1f53b34a766253bfa2e980b5255cb8f7aa897f2c","first_seen":"2025-03-03T21:34:49.716488Z","last_seen":"2026-07-16T05:53:11.448436Z","times_seen":143,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mobilbahis.com/images/payment/ethirium.avif","fqdn":"www.mobilbahis.com","domain":"mobilbahis.com","tld":"com"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.mobilbahis.com/","date":"2026-05-17T10:19:53.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mobilbahis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B4:82:0C:F3:CD:C1:F8:86:4F:E9:A6:B4:03:06:9A:6A:FB:23:8E:C2","sha256":"D7:C0:90:CD:F5:17:F3:58:F7:14:D7:C5:91:7F:7D:6F:2A:C9:A0:7D:F1:4D:9C:8E:D2:A0:3A:04:A0:49:A5:C7"}}},"request":{"raw":"GET /images/payment/ethirium.avif HTTP/1.1\r\nHost: www.mobilbahis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mobilbahis.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2220\r\nserver: nginx\r\ndate: Sun, 17 May 2026 10:19:53 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 20 Oct 2025 15:02:55 GMT\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xlMGBHta-iL-npeMscU1g5TVaPk-FSxk7yZIQoIq5iQMZapxVyn3yA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e6b391f43718a004e6b9b6722b2b00f6","sha1":"fcee9febf3230459cd22e1b092537701e033d332","sha256":"a7a6409b26491d0317697a20c9503ed95b5aef4ebebcd4f3a4a8eb01be1e7457","sha512":"9a7abaf4753825c9d8528264e0c45fa11aa51953d958ede4f56a686f358cd57bc9a7378bb2f495bead00a45ec41edfdfb15f08726916eddb1d85467ae96d8556","ssdeep":"","tlshash":"1c415c1d23ee6d93f03907395ac4e3213552913ed1def7b3e7c172044c602660b28c5a","first_seen":"2025-03-03T21:34:49.662043Z","last_seen":"2026-07-15T14:25:55.362127Z","times_seen":162,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mobilbahis.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}