{"report_id":"38c801c5-9c83-414e-aa49-a33808ba23ce","version":6,"status":"done","tags":[],"date":"2026-02-14T05:57:05Z","url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"title":"İşCep","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T05:57:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":6,"received_data":145450,"sent_data":3279,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kredim-onaylanir.cfd","ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":74,"request_count":37,"received_data":911232,"sent_data":20956,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":5,"received_data":1257400,"sent_data":2410,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":7,"received_data":779541,"sent_data":3389,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":3,"received_data":38387,"sent_data":1557,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c12ca2325d0ed930811bf373b1061c1","sha1":"c24548bf5727a8f79eb3bbe7ec02072a945a5b90","sha256":"72cd35a256f7cd217f2613956e3b606c678e681788ed53a7667f22d33bf3eef3","sha512":"9e2b8c999d8b9b402b50b258965101bed0db4198ba53b3f8c3ac78879a9941fb504eb7b613238d36bcf48c982bc4a41ccf07563dc3e08d33c0ae833a3d0e4f32","ssdeep":"","tlshash":"9f313c28b1b22534026ff56f767fc3c931f2110b1404d5ba35ae42c41fe4f5526a1ed5","size":1738,"data":"","first_seen":"2026-02-13T13:25:39.569031Z","last_seen":"2026-02-14T05:57:10.233115Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7762561c1936105d4edf1c53d6e0b0f5","sha1":"9f82c4dc9bbd90f2a22d970f8587e228f69290a4","sha256":"2fb092d1054eddd06d5fde8949e2c45b04ea7e1e9a83b0d8f172002570608570","sha512":"91518af706e88cefa9df4fcd18f52982961a773fc0c239880fc630a986e43b7f3d21b95982d46a045ab49bb25c212f46f68d82689efa69d35ad72e8bb4e5134b","ssdeep":"384:FL+mD6TUAayYAAMx2KRtIgASskSsysByEswZDFiTIbFE:XDA3rAg2K8qszsJs2piTIbm","tlshash":"2e9261bd14b319354b23a1fd539f950a7225500b1416dd0abe2c8b057fc8e397af2bea","size":20182,"data":"","first_seen":"2026-02-13T13:25:39.572048Z","last_seen":"2026-02-14T05:57:10.234168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7cf03b6a10c1aabf4562a5b9b8e80ab","sha1":"c294c9141b8817feddb06f630c0c4bb5db5295fd","sha256":"065ab4c7a4a584e0df2500971f07a6ce4ddae9554e2f1b8c80ac2ae20601743c","sha512":"ca353e96537cc6bdcd4b923e778091a6a35096543380afc34a159f52bdd2529930ad90e18b2c3343620d4a80d672becc5f059e133afbdd93847dd07bac3ab99e","ssdeep":"","tlshash":"35f0e2372f3a1a320bfad1ba1ad97b5266a2000b02508f093a7e49450fc4e451cf00e1","size":568,"data":"","first_seen":"2026-02-13T13:25:39.57614Z","last_seen":"2026-02-14T05:57:10.235841Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/login.php","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:47.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"POST /login.php HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 15\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"tckn=\u0026password="}},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd/\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/left-arrow.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/left-arrow.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2834\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-b12\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"1f6cc5a48ab9c7f575391ba95e71932c","sha1":"839f1f216e1e387b7f6436b4b62e12055ac526e2","sha256":"ab9a08be82f5152999971b505a3a7dbdda71fd559a9d61723278f4b33fa50aa9","sha512":"77fd5b4661fd83e9406ce62bbf9a4c983330f4dccb545b96c6898265cdf0f755cab4bc67cddc55776d3eb98ff9a730f48da1dc3a52eecfc9a9a93926864a7185","ssdeep":"","tlshash":"67510a1afe30ac101b5dae0466f6910b65776a400bc0a552fddccc675a321becd4e0c3","first_seen":"2026-02-13T13:25:39.563443Z","last_seen":"2026-02-14T05:57:10.208148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:38.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //login HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7963\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46039,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (469), with CRLF, LF line terminators","md5":"a2bb892de6cd173463980096e04d9cb5","sha1":"e3de18353e7c5600fbf13ebbc56a8112c6a7b8b1","sha256":"1b48d598170a5dd1351a5beb300bf549a52381c993cacad3ea173f7f9d141805","sha512":"cca917700e98691706bf17b75194363cd0753cd217ef28e391baf4fca23c1701d05ceaa2523bec97dcd1d3f3a6609da82cb15fcec71e580c7535955d6d3263d1","ssdeep":"768:BiHtFbl7FmNiKv5Q9DqQYuk6qDA3rAg2K8qszsJs2piTIbg:itRl7+vaJqQYu2AaKJszsJsEi+g","tlshash":"772385aa11f310155613e0be6fab960a33a1d003c50bcd297fdc17889fc6e956de27e9","first_seen":"2026-02-13T13:25:39.507656Z","last_seen":"2026-02-14T05:57:10.212052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:47.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //login HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 8178\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (469), with CRLF, LF line terminators","md5":"b7c071f6702ec7a96f4061c55cee7d67","sha1":"c442b2b442021c0a4dbc6aac1bf510487b57c541","sha256":"e8916a8f1b14d8c509b3fdccdbaf5a533fca9e953b1022122bb06a801cd0f675","sha512":"f354eb1c09428cbba93cb289db611f3388222b3d5eedf78492a04d41139a1665fbb28f676ade813b8f874ef976ef29b48b004a6fbbc49dca45a26f04b15c40fe","ssdeep":"768:BiHtFbl7FmNiKv5Q9DqQYuk6qDA3rAg2K8qszsJs2piTIbQ:itRl7+vaJqQYu2AaKJszsJsEi+Q","tlshash":"bd2385a615f310255613e0be6fab970633a1d003c50bcd287fdc16889fc6e956de27e9","first_seen":"2026-02-13T13:25:39.558733Z","last_seen":"2026-02-14T05:57:10.215549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:44.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //login HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 8178\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (469), with CRLF, LF line terminators","md5":"b7c071f6702ec7a96f4061c55cee7d67","sha1":"c442b2b442021c0a4dbc6aac1bf510487b57c541","sha256":"e8916a8f1b14d8c509b3fdccdbaf5a533fca9e953b1022122bb06a801cd0f675","sha512":"f354eb1c09428cbba93cb289db611f3388222b3d5eedf78492a04d41139a1665fbb28f676ade813b8f874ef976ef29b48b004a6fbbc49dca45a26f04b15c40fe","ssdeep":"768:BiHtFbl7FmNiKv5Q9DqQYuk6qDA3rAg2K8qszsJs2piTIbQ:itRl7+vaJqQYu2AaKJszsJsEi+Q","tlshash":"bd2385a615f310255613e0be6fab970633a1d003c50bcd287fdc16889fc6e956de27e9","first_seen":"2026-02-13T13:25:39.558733Z","last_seen":"2026-02-14T05:57:10.215549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 40700\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 3.34.0\r\nx-jsd-version-type: version\r\netag: W/\"3d35d-HmB13zO0xpo+p/NpEmnrHQBJyOA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\nage: 2518232\r\nx-served-by: cache-fra-etou8220148-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250717,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65407)","md5":"daab0de28375263dd9f089c6ef88c95a","sha1":"1e6075df33b4c69a3ea7f3691269eb1d0049c8e0","sha256":"7933818535697dced6aef2b819192ffe6c0d68adb1999a8c6bb50ce893a98307","sha512":"32c3bfa043b7d7749e5a4f3b6d42335590679bcbfb04ad3fd361ba7b561a25de83d7fc8cefeacb0124e72a99db57c41ff66acec5537ea394445f68b1f3917227","ssdeep":"1536:0BvjkMB0ib/Ta6yn5VyXwJOSwkSSYGWQcl4qFOSjzhfXlwygZJaC2lnUslm53:KvjkrZWAOSwkNlK4qMGhPFgaC2lUsy","tlshash":"ab344fb9e54d44d5b736c04beb91b2ae5192f238e2950cbdf20f600d6ed2a6406c9f7c","first_seen":"2025-06-19T15:48:56.343482Z","last_seen":"2026-08-09T01:40:24.002838Z","times_seen":56,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:44.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:56:44 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9cda52f35f198be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 794285\r\nexpires: Thu, 04 Feb 2027 05:56:44 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7GIHWdOpry7%2BR6hKoD4%2BLIxXvtLmyGzupjCG5U9Xcf0GRxWgUM7bw5fX%2FMOtF91LqsgMk7W5FB23HDJa1PFxE1AgSG%2Fz8aNvaAVR1b5NzVo0Hwch%2Fv%2B1cNyj0nngifkp4ZT4Q7fh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-15T11:28:47.777961Z","times_seen":34796,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Outfit:wght@100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 05:56:45 GMT\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12123,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1222fa4b24291c9a749052b3700ea112","sha1":"17f0d04bf433cbc6840f79f621a8a3d8ba71eca3","sha256":"8983f3f274875384e0a46c32d67d61f7777e2ff61f1290a1c4624c9163a5c3c0","sha512":"0e84cc5124e58b041c30a6a6ada4978a0f45558aa6ef3f6bb57bdd4cc88fc7844e06b9941df2e003661990fde8f75eb9711ae24ee09f676f41882be6b59f78d2","ssdeep":"192:XhGcuN2BGCuN2BbuN2BT+uN2BMcuN2BPq1uN2BebqGIwV4nuN2B1uN2B+AuN2B0G:rk9Ck6kS+kokz1kdqY4nkuk+k7KfwK5X","tlshash":"72420ca1041b60449b834ce223ce7e34fe0f92507141d1b9bbfdab6baddbc66526835c","first_seen":"2025-11-19T02:40:33.885078Z","last_seen":"2026-02-14T05:57:10.221652Z","times_seen":8,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9cda52f7a9e28be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 794286\r\nexpires: Thu, 04 Feb 2027 05:56:45 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Tsz2AgcrCPmuKSEku4GC%2FuagszqRXDovx9%2BwKFDC%2Bl31ONJn%2Fh0nnZtVAg9BZ21knBKaiCJ%2BXbRk9qEEKU9eEtJnYPQNrel%2B4iuFZnTiHRIJkP9Q0T2olaYjMyxfpjLGkRIk9XFQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-15T11:28:47.777961Z","times_seen":34796,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 40700\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 3.34.0\r\nx-jsd-version-type: version\r\netag: W/\"3d35d-HmB13zO0xpo+p/NpEmnrHQBJyOA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\nage: 2518235\r\nx-served-by: cache-fra-etou8220148-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250717,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65407)","md5":"daab0de28375263dd9f089c6ef88c95a","sha1":"1e6075df33b4c69a3ea7f3691269eb1d0049c8e0","sha256":"7933818535697dced6aef2b819192ffe6c0d68adb1999a8c6bb50ce893a98307","sha512":"32c3bfa043b7d7749e5a4f3b6d42335590679bcbfb04ad3fd361ba7b561a25de83d7fc8cefeacb0124e72a99db57c41ff66acec5537ea394445f68b1f3917227","ssdeep":"1536:0BvjkMB0ib/Ta6yn5VyXwJOSwkSSYGWQcl4qFOSjzhfXlwygZJaC2lnUslm53:KvjkrZWAOSwkNlK4qMGhPFgaC2lUsy","tlshash":"ab344fb9e54d44d5b736c04beb91b2ae5192f238e2950cbdf20f600d6ed2a6406c9f7c","first_seen":"2025-06-19T15:48:56.343482Z","last_seen":"2026-08-09T01:40:24.002838Z","times_seen":56,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJuktqUYTkntBJ2fk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJuktqUYTkntBJ2fk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:54:55 GMT\r\nexpires: Sat, 13 Feb 2027 00:54:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:21:52 GMT\r\ncontent-type: font/woff2\r\nage: 104503\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14732, version 1.0","md5":"7c322814707ea577390977206b013f23","sha1":"64907de0898b2ead9b9f2d8018d10e3fec770241","sha256":"c15404cf3c1f7d2befb885bbdf9955e6df981fded8c544cccc18c2dac3ce34aa","sha512":"99a00a54d748eb1944730dc85c673f3b0ace279b3dd318cb224fd70ab1621383bda0d008c3836e158f67a0d52a5a4ee481a1bb2e4c7b20908e6cf34f41216092","ssdeep":"384:/l7ypLBiJyAfzXUsQzWm8zTK8yUFkSLSZxdndm:97ELU8KXUPu/FxLUxi","tlshash":"8262b08fde814f65c58159b2ac853040b57d75809bfec2de4b4be11dcba328ca405aef","first_seen":"2025-09-08T02:28:39.84107Z","last_seen":"2026-08-15T11:08:06.046452Z","times_seen":4060,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":70,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:44.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd//login\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:42.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd//login\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:45.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //login HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 8178\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (469), with CRLF, LF line terminators","md5":"b7c071f6702ec7a96f4061c55cee7d67","sha1":"c442b2b442021c0a4dbc6aac1bf510487b57c541","sha256":"e8916a8f1b14d8c509b3fdccdbaf5a533fca9e953b1022122bb06a801cd0f675","sha512":"f354eb1c09428cbba93cb289db611f3388222b3d5eedf78492a04d41139a1665fbb28f676ade813b8f874ef976ef29b48b004a6fbbc49dca45a26f04b15c40fe","ssdeep":"768:BiHtFbl7FmNiKv5Q9DqQYuk6qDA3rAg2K8qszsJs2piTIbQ:itRl7+vaJqQYu2AaKJszsJsEi+Q","tlshash":"bd2385a615f310255613e0be6fab970633a1d003c50bcd287fdc16889fc6e956de27e9","first_seen":"2026-02-13T13:25:39.558733Z","last_seen":"2026-02-14T05:57:10.215549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/login.php","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:41.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"POST /login.php HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 15\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"tckn=\u0026password="}},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd/\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:41.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:56:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9cda52e0df058be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 794282\r\nexpires: Thu, 04 Feb 2027 05:56:41 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BFGnNicTeBOgsEQ7GK9toVoOoFu84i0XmXiSXVnQbVK9Y7lcY%2BKDAMwUK9IfzdbchiGTrf8JAe7ui1dvI1EuFBHyFR9rl%2Fac5ICl%2FAoUpnApWBOpGpyAHUsqLL9NxUFrVyR78xYE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-15T11:28:47.777961Z","times_seen":34796,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/left-arrow.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/left-arrow.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 2834\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-b12\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"1f6cc5a48ab9c7f575391ba95e71932c","sha1":"839f1f216e1e387b7f6436b4b62e12055ac526e2","sha256":"ab9a08be82f5152999971b505a3a7dbdda71fd559a9d61723278f4b33fa50aa9","sha512":"77fd5b4661fd83e9406ce62bbf9a4c983330f4dccb545b96c6898265cdf0f755cab4bc67cddc55776d3eb98ff9a730f48da1dc3a52eecfc9a9a93926864a7185","ssdeep":"","tlshash":"67510a1afe30ac101b5dae0466f6910b65776a400bc0a552fddccc675a321becd4e0c3","first_seen":"2026-02-13T13:25:39.563443Z","last_seen":"2026-02-14T05:57:10.208148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/down-arrow.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/down-arrow.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1893\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-765\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit gray+alpha, non-interlaced","md5":"119e81187f335d7c477a29bbb76a8301","sha1":"6d9fcf9f6033b53cf3147926856cd6a9985faac5","sha256":"3e4d3a43c0b08d368df7ff45b2ae41da3ce3e6e06587acb9f2afdf0668f1f5f2","sha512":"c678accf71e4ed29bbe7194b8f1a07338c80aed8059c779656d364ec718d1346faad58641e3c563dcbb6e5a3c2d505969036d2d75873931cc6f43a504d123a0e","ssdeep":"","tlshash":"5741c849f8259c10ea0eee061ef9a1571e7b16c0c98194a1accacc4374201fdc95c5c7","first_seen":"2026-02-13T13:25:39.541174Z","last_seen":"2026-02-14T05:57:10.224411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9cda52cd6ef1a0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 794279\r\nexpires: Thu, 04 Feb 2027 05:56:38 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9Xi29YK9nS30lvsOzmM5JofKw7VUJh8KEKqQ7gcqPQ%2FDsUm6%2FT5te41qIfd5rTWEbQTWK34bVb%2BvofnbE09sEaFWziMaC0L7qXHiP2LVqbfF3zcqTTKbO3Qi3YFojodCkMJDj%2B7u\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-15T11:28:47.777961Z","times_seen":34796,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":15,"dns":1,"connect":2,"send":0,"wait":11,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/css/styles.css","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/css/styles.css HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Feb 2026 20:44:45 GMT\r\netag: W/\"698e3bbd-21a7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6fa1f242ec6ee64bc460474b22e5287","sha1":"a50ebcd2cec426828a3b1e2260f5755185692dd8","sha256":"5fbceb037bea5b715500b580213538ffc4a5eb3af0d4c62ff256d02bf80b2d15","sha512":"348fb14568b9f5bac7e987ca97b9d7eac45f725a654045c6276832f8c7624fcd7ebe24fb61e779d72235f9f4c519b8c17fe9583b016e4a182878bed930feedb5","ssdeep":"192:LNzDq4P7lF+q7PSPHuS62+/T+3vqDk9Qq549EyKZA9zCmGoJti:BDFJIqjqR","tlshash":"6c0251d15e630584f516c5a82bf69b98235d8047ce4bcd7c7fc5b288cf892e865a2bcc","first_seen":"2026-02-13T13:25:39.511636Z","last_seen":"2026-02-14T05:57:10.22641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/left-arrow.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/left-arrow.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2834\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-b12\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"1f6cc5a48ab9c7f575391ba95e71932c","sha1":"839f1f216e1e387b7f6436b4b62e12055ac526e2","sha256":"ab9a08be82f5152999971b505a3a7dbdda71fd559a9d61723278f4b33fa50aa9","sha512":"77fd5b4661fd83e9406ce62bbf9a4c983330f4dccb545b96c6898265cdf0f755cab4bc67cddc55776d3eb98ff9a730f48da1dc3a52eecfc9a9a93926864a7185","ssdeep":"","tlshash":"67510a1afe30ac101b5dae0466f6910b65776a400bc0a552fddccc675a321becd4e0c3","first_seen":"2026-02-13T13:25:39.563443Z","last_seen":"2026-02-14T05:57:10.208148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/favicon.ico","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/favicon.ico HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 894\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"37e-6402962d18900\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"9c12e4e0efc2ea814e4b89ae1a836e5b","sha1":"09056c5be2302570da15c942cd12bd32436dbf70","sha256":"591b430a4140f80ffd37c0b0051dc2a6d29fa476142c116fe7007559d3b7a060","sha512":"f142ea9464cf216f48609c39d13d688ea43c1e84c0df3e5a34a4c6ccb15c0889beed207a7bcbada995869996c7ecb5fe9110a57a9e71e960ce32b3188bbd0487","ssdeep":"","tlshash":"8b11dc456439e480c8707936ee5ecaf1042edc06b54296a3216fbc0b3e226319421c80","first_seen":"2025-08-16T18:28:02.202922Z","last_seen":"2026-05-11T11:15:30.399794Z","times_seen":16,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9cda52e58aa98be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 794283\r\nexpires: Thu, 04 Feb 2027 05:56:42 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3oxH68gZ%2FKlYVza2YbuhvvHT5HpDJ%2F2m5S6Yk3k7vpwtxYqtnWz3focDakZSBbHzU8dqjA66j7oOZTVBPqysarw3W%2FZOw3%2Bte5O8%2BzE9AltQDXeo049pz9a5Pd4SGHwASN1d4s%2Bs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-15T11:28:47.777961Z","times_seen":34796,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:41.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 40700\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 3.34.0\r\nx-jsd-version-type: version\r\netag: W/\"3d35d-HmB13zO0xpo+p/NpEmnrHQBJyOA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 05:56:41 GMT\r\nage: 2518231\r\nx-served-by: cache-fra-etou8220148-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250717,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65407)","md5":"daab0de28375263dd9f089c6ef88c95a","sha1":"1e6075df33b4c69a3ea7f3691269eb1d0049c8e0","sha256":"7933818535697dced6aef2b819192ffe6c0d68adb1999a8c6bb50ce893a98307","sha512":"32c3bfa043b7d7749e5a4f3b6d42335590679bcbfb04ad3fd361ba7b561a25de83d7fc8cefeacb0124e72a99db57c41ff66acec5537ea394445f68b1f3917227","ssdeep":"1536:0BvjkMB0ib/Ta6yn5VyXwJOSwkSSYGWQcl4qFOSjzhfXlwygZJaC2lnUslm53:KvjkrZWAOSwkNlK4qMGhPFgaC2lUsy","tlshash":"ab344fb9e54d44d5b736c04beb91b2ae5192f238e2950cbdf20f600d6ed2a6406c9f7c","first_seen":"2025-06-19T15:48:56.343482Z","last_seen":"2026-08-09T01:40:24.002838Z","times_seen":56,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/user.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/user.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 3083\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-c0b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"3fcd8d0d852cd55f82073580d77e1ae3","sha1":"aeba1e1b003f03721708226e2bdb270ef1f7282e","sha256":"a49dfa47f16f70cfb51b4c7aa6970e7f36534405b3dfad327904d2c06bb7397a","sha512":"fd29761ff573d5f9532ebed8db85aa23c1617622ada841a2231eaa24a9e2a1418067a3f96b93e46b4fa681bfa3abc3a075cb07cc1be28c283a7aaa2d0c41a873","ssdeep":"","tlshash":"2f511882fa321c90921cbd882af2629b6573435cbec2a5423cf9cd134e7007eca1d5c6","first_seen":"2026-02-13T13:25:39.555505Z","last_seen":"2026-02-14T05:57:10.22939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/favicon.ico","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/favicon.ico HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 894\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"37e-6402962d18900\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"9c12e4e0efc2ea814e4b89ae1a836e5b","sha1":"09056c5be2302570da15c942cd12bd32436dbf70","sha256":"591b430a4140f80ffd37c0b0051dc2a6d29fa476142c116fe7007559d3b7a060","sha512":"f142ea9464cf216f48609c39d13d688ea43c1e84c0df3e5a34a4c6ccb15c0889beed207a7bcbada995869996c7ecb5fe9110a57a9e71e960ce32b3188bbd0487","ssdeep":"","tlshash":"8b11dc456439e480c8707936ee5ecaf1042edc06b54296a3216fbc0b3e226319421c80","first_seen":"2025-08-16T18:28:02.202922Z","last_seen":"2026-05-11T11:15:30.399794Z","times_seen":16,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:48.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/logo.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/logo.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 17092\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-42c4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"3079a13c71de2d1c17319bedce119475","sha1":"53c6510b512d789fb1141297d2f1fbeacde5d125","sha256":"907775dde62cd707d98d3bda15bf6a332ba530d84659f59bed50174063d3d8d2","sha512":"3a637c6e0b7355f7bc4ca24f3bc8af7e9224f0c04460e93ebe2dd7f50d1a3ca6b81d06d62c6f1fcead409c781141514c812b5801ca37c9e8f6204659fa535247","ssdeep":"384:xFv4yeYgrceo+JHc8mhPCoecJ1wmSlOu7LOPPVFOGK:x6lTbJHpKeWdSj72PVQGK","tlshash":"b072e174c81b4e3ea263cfe976e5e308bfe6258d21c17c976b717dc18b071196329422","first_seen":"2026-02-13T13:25:39.536423Z","last_seen":"2026-02-14T05:57:10.23061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:47.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd//login\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:37.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3; path=/\r\nlocation: https://kredim-onaylanir.cfd//login\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46039,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":234,"dns":150,"connect":39,"send":0,"wait":188,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/logo.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/logo.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 17092\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-42c4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"3079a13c71de2d1c17319bedce119475","sha1":"53c6510b512d789fb1141297d2f1fbeacde5d125","sha256":"907775dde62cd707d98d3bda15bf6a332ba530d84659f59bed50174063d3d8d2","sha512":"3a637c6e0b7355f7bc4ca24f3bc8af7e9224f0c04460e93ebe2dd7f50d1a3ca6b81d06d62c6f1fcead409c781141514c812b5801ca37c9e8f6204659fa535247","ssdeep":"384:xFv4yeYgrceo+JHc8mhPCoecJ1wmSlOu7LOPPVFOGK:x6lTbJHpKeWdSj72PVQGK","tlshash":"b072e174c81b4e3ea263cfe976e5e308bfe6258d21c17c976b717dc18b071196329422","first_seen":"2026-02-13T13:25:39.536423Z","last_seen":"2026-02-14T05:57:10.23061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/css/styles.css","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/css/styles.css HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Feb 2026 20:44:45 GMT\r\netag: W/\"698e3bbd-21a7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6fa1f242ec6ee64bc460474b22e5287","sha1":"a50ebcd2cec426828a3b1e2260f5755185692dd8","sha256":"5fbceb037bea5b715500b580213538ffc4a5eb3af0d4c62ff256d02bf80b2d15","sha512":"348fb14568b9f5bac7e987ca97b9d7eac45f725a654045c6276832f8c7624fcd7ebe24fb61e779d72235f9f4c519b8c17fe9583b016e4a182878bed930feedb5","ssdeep":"192:LNzDq4P7lF+q7PSPHuS62+/T+3vqDk9Qq549EyKZA9zCmGoJti:BDFJIqjqR","tlshash":"6c0251d15e630584f516c5a82bf69b98235d8047ce4bcd7c7fc5b288cf892e865a2bcc","first_seen":"2026-02-13T13:25:39.511636Z","last_seen":"2026-02-14T05:57:10.22641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/login.php","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:44.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"POST /login.php HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 15\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"tckn=\u0026password="}},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd/\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:47.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:56:47 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9cda53056cc68be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 794288\r\nexpires: Thu, 04 Feb 2027 05:56:47 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=647fw2lnE9sY4DzJr%2FD6a7zNcDgv9Oll5lRsC0ZMV%2FdqiwVuW3D9Kg29dBFva9H7enuur3HE358lUJqCkl%2B%2FkfMU3h0XvJYDoaNx0FklyEH75d%2B7KX%2BSQq%2FGE%2F736XWzBy9ONtGG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-15T11:28:47.777961Z","times_seen":34796,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:45.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd//login\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:41.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd//login\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/logo.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/logo.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 17092\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-42c4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit/color RGBA, non-interlaced","md5":"3079a13c71de2d1c17319bedce119475","sha1":"53c6510b512d789fb1141297d2f1fbeacde5d125","sha256":"907775dde62cd707d98d3bda15bf6a332ba530d84659f59bed50174063d3d8d2","sha512":"3a637c6e0b7355f7bc4ca24f3bc8af7e9224f0c04460e93ebe2dd7f50d1a3ca6b81d06d62c6f1fcead409c781141514c812b5801ca37c9e8f6204659fa535247","ssdeep":"384:xFv4yeYgrceo+JHc8mhPCoecJ1wmSlOu7LOPPVFOGK:x6lTbJHpKeWdSj72PVQGK","tlshash":"b072e174c81b4e3ea263cfe976e5e308bfe6258d21c17c976b717dc18b071196329422","first_seen":"2026-02-13T13:25:39.536423Z","last_seen":"2026-02-14T05:57:10.23061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:47.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 40700\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 3.34.0\r\nx-jsd-version-type: version\r\netag: W/\"3d35d-HmB13zO0xpo+p/NpEmnrHQBJyOA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 05:56:47 GMT\r\nage: 2518237\r\nx-served-by: cache-fra-etou8220148-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250717,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65407)","md5":"daab0de28375263dd9f089c6ef88c95a","sha1":"1e6075df33b4c69a3ea7f3691269eb1d0049c8e0","sha256":"7933818535697dced6aef2b819192ffe6c0d68adb1999a8c6bb50ce893a98307","sha512":"32c3bfa043b7d7749e5a4f3b6d42335590679bcbfb04ad3fd361ba7b561a25de83d7fc8cefeacb0124e72a99db57c41ff66acec5537ea394445f68b1f3917227","ssdeep":"1536:0BvjkMB0ib/Ta6yn5VyXwJOSwkSSYGWQcl4qFOSjzhfXlwygZJaC2lnUslm53:KvjkrZWAOSwkNlK4qMGhPFgaC2lUsy","tlshash":"ab344fb9e54d44d5b736c04beb91b2ae5192f238e2950cbdf20f600d6ed2a6406c9f7c","first_seen":"2025-06-19T15:48:56.343482Z","last_seen":"2026-08-09T01:40:24.002838Z","times_seen":56,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/login.php","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:48.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"POST /login.php HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 15\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"tckn=\u0026password="}},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd/\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/favicon.ico","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:39.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/favicon.ico HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:39 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 894\r\nx-accel-version: 0.01\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"37e-6402962d18900\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"9c12e4e0efc2ea814e4b89ae1a836e5b","sha1":"09056c5be2302570da15c942cd12bd32436dbf70","sha256":"591b430a4140f80ffd37c0b0051dc2a6d29fa476142c116fe7007559d3b7a060","sha512":"f142ea9464cf216f48609c39d13d688ea43c1e84c0df3e5a34a4c6ccb15c0889beed207a7bcbada995869996c7ecb5fe9110a57a9e71e960ce32b3188bbd0487","ssdeep":"","tlshash":"8b11dc456439e480c8707936ee5ecaf1042edc06b54296a3216fbc0b3e226319421c80","first_seen":"2025-08-16T18:28:02.202922Z","last_seen":"2026-05-11T11:15:30.399794Z","times_seen":16,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/login.php","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:41.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"POST /login.php HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 15\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"tckn=\u0026password="}},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd/\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJuktqUYTkntBJ2fk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJuktqUYTkntBJ2fk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:54:55 GMT\r\nexpires: Sat, 13 Feb 2027 00:54:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:21:52 GMT\r\ncontent-type: font/woff2\r\nage: 104510\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14732, version 1.0","md5":"7c322814707ea577390977206b013f23","sha1":"64907de0898b2ead9b9f2d8018d10e3fec770241","sha256":"c15404cf3c1f7d2befb885bbdf9955e6df981fded8c544cccc18c2dac3ce34aa","sha512":"99a00a54d748eb1944730dc85c673f3b0ace279b3dd318cb224fd70ab1621383bda0d008c3836e158f67a0d52a5a4ee481a1bb2e4c7b20908e6cf34f41216092","ssdeep":"384:/l7ypLBiJyAfzXUsQzWm8zTK8yUFkSLSZxdndm:97ELU8KXUPu/FxLUxi","tlshash":"8262b08fde814f65c58159b2ac853040b57d75809bfec2de4b4be11dcba328ca405aef","first_seen":"2025-09-08T02:28:39.84107Z","last_seen":"2026-08-15T11:08:06.046452Z","times_seen":4060,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/down-arrow.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/down-arrow.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1893\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-765\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit gray+alpha, non-interlaced","md5":"119e81187f335d7c477a29bbb76a8301","sha1":"6d9fcf9f6033b53cf3147926856cd6a9985faac5","sha256":"3e4d3a43c0b08d368df7ff45b2ae41da3ce3e6e06587acb9f2afdf0668f1f5f2","sha512":"c678accf71e4ed29bbe7194b8f1a07338c80aed8059c779656d364ec718d1346faad58641e3c563dcbb6e5a3c2d505969036d2d75873931cc6f43a504d123a0e","ssdeep":"","tlshash":"5741c849f8259c10ea0eee061ef9a1571e7b16c0c98194a1accacc4374201fdc95c5c7","first_seen":"2026-02-13T13:25:39.541174Z","last_seen":"2026-02-14T05:57:10.224411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/down-arrow.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/down-arrow.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 1893\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-765\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit gray+alpha, non-interlaced","md5":"119e81187f335d7c477a29bbb76a8301","sha1":"6d9fcf9f6033b53cf3147926856cd6a9985faac5","sha256":"3e4d3a43c0b08d368df7ff45b2ae41da3ce3e6e06587acb9f2afdf0668f1f5f2","sha512":"c678accf71e4ed29bbe7194b8f1a07338c80aed8059c779656d364ec718d1346faad58641e3c563dcbb6e5a3c2d505969036d2d75873931cc6f43a504d123a0e","ssdeep":"","tlshash":"5741c849f8259c10ea0eee061ef9a1571e7b16c0c98194a1accacc4374201fdc95c5c7","first_seen":"2026-02-13T13:25:39.541174Z","last_seen":"2026-02-14T05:57:10.224411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Outfit:wght@100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 05:56:42 GMT\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12123,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1222fa4b24291c9a749052b3700ea112","sha1":"17f0d04bf433cbc6840f79f621a8a3d8ba71eca3","sha256":"8983f3f274875384e0a46c32d67d61f7777e2ff61f1290a1c4624c9163a5c3c0","sha512":"0e84cc5124e58b041c30a6a6ada4978a0f45558aa6ef3f6bb57bdd4cc88fc7844e06b9941df2e003661990fde8f75eb9711ae24ee09f676f41882be6b59f78d2","ssdeep":"192:XhGcuN2BGCuN2BbuN2BT+uN2BMcuN2BPq1uN2BebqGIwV4nuN2B1uN2B+AuN2B0G:rk9Ck6kS+kokz1kdqY4nkuk+k7KfwK5X","tlshash":"72420ca1041b60449b834ce223ce7e34fe0f92507141d1b9bbfdab6baddbc66526835c","first_seen":"2025-11-19T02:40:33.885078Z","last_seen":"2026-02-14T05:57:10.221652Z","times_seen":8,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 21:15:08 GMT\r\nexpires: Tue, 09 Feb 2027 21:15:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376894\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-15T11:08:06.068613Z","times_seen":29332,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/user.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/user.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 3083\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-c0b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"3fcd8d0d852cd55f82073580d77e1ae3","sha1":"aeba1e1b003f03721708226e2bdb270ef1f7282e","sha256":"a49dfa47f16f70cfb51b4c7aa6970e7f36534405b3dfad327904d2c06bb7397a","sha512":"fd29761ff573d5f9532ebed8db85aa23c1617622ada841a2231eaa24a9e2a1418067a3f96b93e46b4fa681bfa3abc3a075cb07cc1be28c283a7aaa2d0c41a873","ssdeep":"","tlshash":"2f511882fa321c90921cbd882af2629b6573435cbec2a5423cf9cd134e7007eca1d5c6","first_seen":"2026-02-13T13:25:39.555505Z","last_seen":"2026-02-14T05:57:10.22939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 21:15:08 GMT\r\nexpires: Tue, 09 Feb 2027 21:15:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376891\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-15T11:08:06.068613Z","times_seen":29332,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":166,"dns":1,"connect":20,"send":0,"wait":9,"receive":4,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJuktqUYTkntBJ2fk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:42.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJuktqUYTkntBJ2fk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:54:55 GMT\r\nexpires: Sat, 13 Feb 2027 00:54:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:21:52 GMT\r\ncontent-type: font/woff2\r\nage: 104507\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14732, version 1.0","md5":"7c322814707ea577390977206b013f23","sha1":"64907de0898b2ead9b9f2d8018d10e3fec770241","sha256":"c15404cf3c1f7d2befb885bbdf9955e6df981fded8c544cccc18c2dac3ce34aa","sha512":"99a00a54d748eb1944730dc85c673f3b0ace279b3dd318cb224fd70ab1621383bda0d008c3836e158f67a0d52a5a4ee481a1bb2e4c7b20908e6cf34f41216092","ssdeep":"384:/l7ypLBiJyAfzXUsQzWm8zTK8yUFkSLSZxdndm:97ELU8KXUPu/FxLUxi","tlshash":"8262b08fde814f65c58159b2ac853040b57d75809bfec2de4b4be11dcba328ca405aef","first_seen":"2025-09-08T02:28:39.84107Z","last_seen":"2026-08-15T11:08:06.046452Z","times_seen":4060,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 21:15:08 GMT\r\nexpires: Tue, 09 Feb 2027 21:15:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376897\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-15T11:08:06.068613Z","times_seen":29332,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/img/user.png","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/img/user.png HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 3083\r\nlast-modified: Thu, 02 Oct 2025 09:12:36 GMT\r\netag: \"68de4204-c0b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"3fcd8d0d852cd55f82073580d77e1ae3","sha1":"aeba1e1b003f03721708226e2bdb270ef1f7282e","sha256":"a49dfa47f16f70cfb51b4c7aa6970e7f36534405b3dfad327904d2c06bb7397a","sha512":"fd29761ff573d5f9532ebed8db85aa23c1617622ada841a2231eaa24a9e2a1418067a3f96b93e46b4fa681bfa3abc3a075cb07cc1be28c283a7aaa2d0c41a873","ssdeep":"","tlshash":"2f511882fa321c90921cbd882af2629b6573435cbec2a5423cf9cd134e7007eca1d5c6","first_seen":"2026-02-13T13:25:39.555505Z","last_seen":"2026-02-14T05:57:10.22939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:42.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //login HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 8178\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (469), with CRLF, LF line terminators","md5":"b7c071f6702ec7a96f4061c55cee7d67","sha1":"c442b2b442021c0a4dbc6aac1bf510487b57c541","sha256":"e8916a8f1b14d8c509b3fdccdbaf5a533fca9e953b1022122bb06a801cd0f675","sha512":"f354eb1c09428cbba93cb289db611f3388222b3d5eedf78492a04d41139a1665fbb28f676ade813b8f874ef976ef29b48b004a6fbbc49dca45a26f04b15c40fe","ssdeep":"768:BiHtFbl7FmNiKv5Q9DqQYuk6qDA3rAg2K8qszsJs2piTIbQ:itRl7+vaJqQYu2AaKJszsJsEi+Q","tlshash":"bd2385a615f310255613e0be6fab970633a1d003c50bcd287fdc16889fc6e956de27e9","first_seen":"2026-02-13T13:25:39.558733Z","last_seen":"2026-02-14T05:57:10.215549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Outfit:wght@100..900\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 05:56:38 GMT\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12123,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1222fa4b24291c9a749052b3700ea112","sha1":"17f0d04bf433cbc6840f79f621a8a3d8ba71eca3","sha256":"8983f3f274875384e0a46c32d67d61f7777e2ff61f1290a1c4624c9163a5c3c0","sha512":"0e84cc5124e58b041c30a6a6ada4978a0f45558aa6ef3f6bb57bdd4cc88fc7844e06b9941df2e003661990fde8f75eb9711ae24ee09f676f41882be6b59f78d2","ssdeep":"192:XhGcuN2BGCuN2BbuN2BT+uN2BMcuN2BPq1uN2BebqGIwV4nuN2B1uN2B+AuN2B0G:rk9Ck6kS+kokz1kdqY4nkuk+k7KfwK5X","tlshash":"72420ca1041b60449b834ce223ce7e34fe0f92507141d1b9bbfdab6baddbc66526835c","first_seen":"2025-11-19T02:40:33.885078Z","last_seen":"2026-02-14T05:57:10.221652Z","times_seen":8,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":90,"dns":1,"connect":9,"send":0,"wait":19,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:41.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 05:56:41 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-ray: 9cda52df4eb5120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"65692999-26350\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 173427\r\nexpires: Thu, 04 Feb 2027 05:56:41 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6TUAiOiOSnojjpqVkFY8w83NCJxZaX1Swoi%2FrH0uslobsdcSkM1qrlSgQETFDZ1lbMAHvb%2BRPqq3bhqoikCsS%2FPR1CJ0SC%2BODkckUm5Sp35O7hOIcCKpuFEnvPa081nHQA7aIhv9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-15T11:28:47.880723Z","times_seen":50346,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":49,"dns":28,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd/login.php","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:44.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"POST /login.php HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 15\r\nOrigin: https://kredim-onaylanir.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"tckn=\u0026password="}},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://kredim-onaylanir.cfd/\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T11:46:16.085064Z","times_seen":17902448,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:38.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@tabler/icons-webfont@3.34.0/dist/tabler-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 3.34.0\r\nx-jsd-version-type: version\r\netag: W/\"3d35d-HmB13zO0xpo+p/NpEmnrHQBJyOA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2518228\r\ndate: Sat, 14 Feb 2026 05:56:38 GMT\r\nx-served-by: cache-fra-etou8220148-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40700\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250717,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65407)","md5":"daab0de28375263dd9f089c6ef88c95a","sha1":"1e6075df33b4c69a3ea7f3691269eb1d0049c8e0","sha256":"7933818535697dced6aef2b819192ffe6c0d68adb1999a8c6bb50ce893a98307","sha512":"32c3bfa043b7d7749e5a4f3b6d42335590679bcbfb04ad3fd361ba7b561a25de83d7fc8cefeacb0124e72a99db57c41ff66acec5537ea394445f68b1f3917227","ssdeep":"1536:0BvjkMB0ib/Ta6yn5VyXwJOSwkSSYGWQcl4qFOSjzhfXlwygZJaC2lnUslm53:KvjkrZWAOSwkNlK4qMGhPFgaC2lUsy","tlshash":"ab344fb9e54d44d5b736c04beb91b2ae5192f238e2950cbdf20f600d6ed2a6406c9f7c","first_seen":"2025-06-19T15:48:56.343482Z","last_seen":"2026-08-09T01:40:24.002838Z","times_seen":56,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":58,"dns":1,"connect":26,"send":0,"wait":27,"receive":27,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//login","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:56:41.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //login HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kredim-onaylanir.cfd//login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 8178\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47009,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (469), with CRLF, LF line terminators","md5":"b7c071f6702ec7a96f4061c55cee7d67","sha1":"c442b2b442021c0a4dbc6aac1bf510487b57c541","sha256":"e8916a8f1b14d8c509b3fdccdbaf5a533fca9e953b1022122bb06a801cd0f675","sha512":"f354eb1c09428cbba93cb289db611f3388222b3d5eedf78492a04d41139a1665fbb28f676ade813b8f874ef976ef29b48b004a6fbbc49dca45a26f04b15c40fe","ssdeep":"768:BiHtFbl7FmNiKv5Q9DqQYuk6qDA3rAg2K8qszsJs2piTIbQ:itRl7+vaJqQYu2AaKJszsJsEi+Q","tlshash":"bd2385a615f310255613e0be6fab970633a1d003c50bcd287fdc16889fc6e956de27e9","first_seen":"2026-02-13T13:25:39.558733Z","last_seen":"2026-02-14T05:57:10.215549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kredim-onaylanir.cfd//assets/isbank/css/styles.css","fqdn":"kredim-onaylanir.cfd","domain":"kredim-onaylanir.cfd","tld":"cfd"},"ip":{"addr":"94.183.168.56","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kredim-onaylanir.cfd//login","date":"2026-02-14T05:56:45.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kredim-onaylanir.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 20:37:27 GMT","end":"Mon, 27 Apr 2026 20:37:26 GMT"},"fingerprint":{"sha1":"95:65:24:B2:51:55:19:FE:7B:08:F4:C3:2B:96:8E:F7:1D:13:73:26","sha256":"0F:8D:17:88:51:81:34:3E:6C:32:88:75:BC:5B:DE:AE:09:50:16:2D:D8:98:F1:FE:D8:07:38:AA:30:8C:89:6A"}}},"request":{"raw":"GET //assets/isbank/css/styles.css HTTP/1.1\r\nHost: kredim-onaylanir.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kredim-onaylanir.cfd//login\r\nCookie: PHPSESSID=dvpus8t0k6c0u576hfufassnr3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 05:56:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Feb 2026 20:44:45 GMT\r\netag: W/\"698e3bbd-21a7\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6fa1f242ec6ee64bc460474b22e5287","sha1":"a50ebcd2cec426828a3b1e2260f5755185692dd8","sha256":"5fbceb037bea5b715500b580213538ffc4a5eb3af0d4c62ff256d02bf80b2d15","sha512":"348fb14568b9f5bac7e987ca97b9d7eac45f725a654045c6276832f8c7624fcd7ebe24fb61e779d72235f9f4c519b8c17fe9583b016e4a182878bed930feedb5","ssdeep":"192:LNzDq4P7lF+q7PSPHuS62+/T+3vqDk9Qq549EyKZA9zCmGoJti:BDFJIqjqR","tlshash":"6c0251d15e630584f516c5a82bf69b98235d8047ce4bcd7c7fc5b288cf892e865a2bcc","first_seen":"2026-02-13T13:25:39.511636Z","last_seen":"2026-02-14T05:57:10.22641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"kredim-onaylanir.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}