{"report_id":"790a0f91-971a-48db-82dd-8793ed47ad8a","version":0,"status":"done","tags":[],"date":"2026-09-18T08:09:11Z","url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"172.234.143.166","port":0,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"title":"Microsoft Security - Verify Your Identity","dom":{"size":234707,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"74e6b16c11665ff5d54f3f94d013f07a","sha1":"00b6adfade31df77502796ef63ef405e1b8afbc4","sha256":"b11c5aae58a36c54b7a8e370c57076614fa278f950362104931e14c979777633","sha512":"ab710f058a58ffe44828ecac72b93e7b7291b2ebb2cc108869418583d65c9ff5e2d19037610288afbb2ba40908c1727ba5ff7e2b1ddcc4dc61dab4cdac7225ee","ssdeep":"768:3Vxd5edOMt4uMLe4PAuiqUAj5sivcbPqo67RMWn0nvSFxLdESsGoGTmBMRRw0GAo:Plzt7OMbImS1PHXRlaNWEyBNR","tlshash":"c534369d03863778f59d4e48c687405264f37a55a9311380bbbdbab26f22fc4d2b069f","dom_hash":"domhasha90b4909d3587bf698bcca66e2b48607","first_seen":"2026-09-18T08:09:14.337608Z","last_seen":"2026-09-18T08:09:14.337608Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"172.234.143.166","port":0,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T08:09:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"domain_registered":"2018-07-11","domain_rank":0,"first_seen":"2026-09-17T14:41:53.770939Z","last_seen":"2026-09-17T14:41:53.770939Z","alert_count":14,"request_count":7,"received_data":191038,"sent_data":4101,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"panel.mobilyabirlik.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-01-07","domain_rank":0,"first_seen":"2026-09-17T14:41:53.772423Z","last_seen":"2026-09-17T14:41:53.772423Z","alert_count":0,"request_count":6,"received_data":0,"sent_data":3807,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f98bea0de58e903e7f22165edcd6bcd","sha1":"0949e02a578802fd9281ea1682a1e18c61fb9dfc","sha256":"1ff392b0c301f5285f43e0af7fb018f0a9dca6039593aaf77b40150ecc067a6b","sha512":"090063aec773643916db03cdc95b8958c7b761d68cf95101d84a7c227f918d6dc4cfd37c8d6fdc5ff9fcfdd4cc0ccee0d1de3d1648ce36f7ef768fced8eccddd","ssdeep":"384:W7tI2aUyqyqGOTimcYkRo+knuM1Y2Z1fWZuV0iz6QQQib26D+KvShuh:ZlaX9WEF4Bz","tlshash":"5fb2205af17711161be7617b9b9b23883236510be80ad9883e5d43406fd2d21f7a3bec","size":24716,"data":"","first_seen":"2026-09-18T08:09:14.349898Z","last_seen":"2026-09-18T08:09:14.349898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a231aa25bb0f7fbc8896c841975d2ea","sha1":"f6cc363eac93b23f2eb06695ad15a01278442917","sha256":"3970b8e49c8ce1d2fb4e338929ec762c438f3f89a618f6fd2d308a4babbdca54","sha512":"449e8f549abf02b05fce637f875b1bc023778192affb4f3cc29a24ba0c7360854dd7920d8576deb239c2d108151c3df1593a799076c1cb697db69e94bab778fc","ssdeep":"","tlshash":"8061ce5e69b230a9107260b75a272104a333955b3c95bca5b6dd06002f9da2fb373be8","size":3455,"data":"","first_seen":"2026-09-18T08:09:14.352769Z","last_seen":"2026-09-18T08:09:14.352769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[Verification UI] Soft recovery triggered:Network error. Please check your connection and ensure the backend URL is correctly configured.","filename":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html line 1 \u003e injectedScript","line_number":763,"column_number":25},{"level":"warn","text":"[Verification UI] Soft recovery triggered:Network error. Please check your connection and ensure the backend URL is correctly configured.","filename":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html line 1 \u003e injectedScript","line_number":763,"column_number":25},{"level":"warn","text":"[Verification UI] Soft recovery triggered:Network error. Please check your connection and ensure the backend URL is correctly configured.","filename":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html line 1 \u003e injectedScript","line_number":763,"column_number":25},{"level":"warn","text":"[Verification UI] Soft recovery triggered:Network error. Please check your connection and ensure the backend URL is correctly configured.","filename":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html line 1 \u003e injectedScript","line_number":763,"column_number":25},{"level":"warn","text":"[Verification UI] Soft recovery triggered:Network error. Please check your connection and ensure the backend URL is correctly configured.","filename":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html line 1 \u003e injectedScript","line_number":763,"column_number":25}]},"http":[{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/favicon.ico","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:08:35.760Z","timestamp":1789718915760,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-iad-10.linodeobjects.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 17:24:22 GMT","end":"Wed, 09 Dec 2026 17:24:21 GMT"},"fingerprint":{"sha1":"23:D7:6E:C0:4D:FA:A9:22:93:0C:80:A3:BE:4A:50:D3:AC:10:3E:37","sha256":"F4:4E:FA:7A:FE:76:13:F5:76:94:88:D7:ED:10:45:5A:AF:89:AA:AD:15:12:3A:C3:25:47:24:52:B4:9F:8A:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mxoff-standard-v.us-iad-10.linodeobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 18 Sep 2026 08:08:36 GMT\r\nContent-Type: application/xml\r\nContent-Length: 253\r\nConnection: keep-alive\r\nx-amz-request-id: tx000006b8614873144ba8e-006aacf184-15378564-default\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":253,"size_decoded":485,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"74662fe4dc4709c27b8d4a226d2502b0","sha1":"b91ef6eedabaaf2b83814b9ce8d94aaafeeacc89","sha256":"bf3f0497fa1b1589ecb567fbef01531609928f0ec8f5fcb2262c8ab5521cadce","sha512":"a2d9bc9ba94f004345c23597d531bb82e51518556d17864b18dfb9ef616afec6c4ef4354681474c95163dd700358637ea21c3f3a699d799766cbb8a74a1d7147","ssdeep":"","tlshash":"08d05e267104a569a2a109656b7ae22afa20a97d73d0742559d157b31f840a60d14730","first_seen":"2026-09-18T08:09:14.339415Z","last_seen":"2026-09-18T08:09:14.339415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1356,"timings":{"blocked":0,"dns":0,"connect":140,"send":0,"wait":753,"receive":0,"ssl":464},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/api/verification/init?session=ddkq4tjx2stmu6ofvst\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:08:49.532Z","timestamp":1789718929532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-iad-10.linodeobjects.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 17:24:22 GMT","end":"Wed, 09 Dec 2026 17:24:21 GMT"},"fingerprint":{"sha1":"23:D7:6E:C0:4D:FA:A9:22:93:0C:80:A3:BE:4A:50:D3:AC:10:3E:37","sha256":"F4:4E:FA:7A:FE:76:13:F5:76:94:88:D7:ED:10:45:5A:AF:89:AA:AD:15:12:3A:C3:25:47:24:52:B4:9F:8A:36"}}},"request":{"raw":"GET /api/verification/init?session=ddkq4tjx2stmu6ofvst\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: mxoff-standard-v.us-iad-10.linodeobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 18 Sep 2026 08:08:49 GMT\r\nContent-Type: application/xml\r\nContent-Length: 253\r\nConnection: keep-alive\r\nx-amz-request-id: tx0000057429edfd08fecda-006aacf191-153574f5-default\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":253,"size_decoded":485,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"ff9d98121c92868347417ba22ac8b926","sha1":"211ef0ccbbc538168cf29341b1c963018a765293","sha256":"b3eab43055820529a8639db441457355cfab67922d4d98b0f7486c97829c560e","sha512":"59e4a01e5472c069e2c0c087ff95798b7c3cf00f0b48cd737f8a2c6d814f3eead5b85f84b7665671a94aced638d9482afd832622de64bd4ebc6e4ed0731f6a84","ssdeep":"","tlshash":"e9d02e5a7204a46eaba30126ab2ee232ba20a83853c03a3069e107a30a104520e10b31","first_seen":"2026-09-18T08:09:14.340896Z","last_seen":"2026-09-18T08:09:14.340896Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"panel.mobilyabirlik.com/api/verification/init?session=5jp9wrllpzxmu6ofylw\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"panel.mobilyabirlik.com","domain":"mobilyabirlik.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:08:52.726Z","timestamp":1789718932726,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/verification/init?session=5jp9wrllpzxmu6ofylw\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: panel.mobilyabirlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/\r\nOrigin: https://mxoff-standard-v.us-iad-10.linodeobjects.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T10:41:48.502002Z","times_seen":18531817,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panel.mobilyabirlik.com/api/verification/init?session=m1n7odjgwrmu6og5ws\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"panel.mobilyabirlik.com","domain":"mobilyabirlik.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:09:02.191Z","timestamp":1789718942191,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/verification/init?session=m1n7odjgwrmu6og5ws\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: panel.mobilyabirlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/\r\nOrigin: https://mxoff-standard-v.us-iad-10.linodeobjects.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T10:41:48.502002Z","times_seen":18531817,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T08:08:33.675Z","timestamp":1789718913675,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-iad-10.linodeobjects.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 17:24:22 GMT","end":"Wed, 09 Dec 2026 17:24:21 GMT"},"fingerprint":{"sha1":"23:D7:6E:C0:4D:FA:A9:22:93:0C:80:A3:BE:4A:50:D3:AC:10:3E:37","sha256":"F4:4E:FA:7A:FE:76:13:F5:76:94:88:D7:ED:10:45:5A:AF:89:AA:AD:15:12:3A:C3:25:47:24:52:B4:9F:8A:36"}}},"request":{"raw":"GET /rsa.html HTTP/1.1\r\nHost: mxoff-standard-v.us-iad-10.linodeobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 18 Sep 2026 08:08:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 187791\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 08 Sep 2026 13:13:32 GMT\r\nx-rgw-object-type: Normal\r\nETag: \"35539baccdc84f8d2b9fb53f4ebba4cd\"\r\nx-amz-request-id: tx00000d99d5dfaee980b42-006aacf182-152dc02b-default\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":187791,"size_decoded":188128,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"35539baccdc84f8d2b9fb53f4ebba4cd","sha1":"bc5dfc632b6142410e16c1933b06d20dc150a952","sha256":"02540e0401df3177a7b7882f6f2704fbe37d25f868796929465e07f7ac7bff00","sha512":"2e5f6c14842e541af545486e42c057a99255f68614cb961af6922912cb697ef27977a8b636792b86289791416f1743b0649b3112a38ca6f89d02b1174c396d66","ssdeep":"768:JVxd5edOMt4uMLe4PAuiqUAj5sivcbPqo67RMWn0nvSFxLdESsGoGTmBMRRw0GAX:lh","tlshash":"6904b39d03863bb8f59c4e48c6c7805264f37a55a9311384abb5bab66d33fc8c1b065f","first_seen":"2026-09-18T08:09:14.343053Z","last_seen":"2026-09-18T08:09:14.343053Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15243,"timings":{"blocked":-1,"dns":59,"connect":136,"send":0,"wait":141,"receive":14530,"ssl":377},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"panel.mobilyabirlik.com/api/verification/init?session=rud1jae39kmu6og1vh\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"panel.mobilyabirlik.com","domain":"mobilyabirlik.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:08:56.959Z","timestamp":1789718936959,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/verification/init?session=rud1jae39kmu6og1vh\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: panel.mobilyabirlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/\r\nOrigin: https://mxoff-standard-v.us-iad-10.linodeobjects.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T10:41:48.502002Z","times_seen":18531817,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/api/verification/init?session=m1n7odjgwrmu6og5ws\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:09:02.233Z","timestamp":1789718942233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-iad-10.linodeobjects.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 17:24:22 GMT","end":"Wed, 09 Dec 2026 17:24:21 GMT"},"fingerprint":{"sha1":"23:D7:6E:C0:4D:FA:A9:22:93:0C:80:A3:BE:4A:50:D3:AC:10:3E:37","sha256":"F4:4E:FA:7A:FE:76:13:F5:76:94:88:D7:ED:10:45:5A:AF:89:AA:AD:15:12:3A:C3:25:47:24:52:B4:9F:8A:36"}}},"request":{"raw":"GET /api/verification/init?session=m1n7odjgwrmu6og5ws\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: mxoff-standard-v.us-iad-10.linodeobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 18 Sep 2026 08:09:02 GMT\r\nContent-Type: application/xml\r\nContent-Length: 253\r\nConnection: keep-alive\r\nx-amz-request-id: tx00000de21f37e956dd40d-006aacf19e-153661d7-default\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":253,"size_decoded":485,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"783d23f48890dfa413b7c298ec813125","sha1":"689309cc19393fc2f8029dcf8235b2b702cfe1c4","sha256":"d96f32950bd3857466bc1775151fcf1ca1f7c6d357d8ff43142dfe5b337d4c99","sha512":"a29809becdb12a5ab4082eadcd891db9a5819a7390e2752cf93fd13307e2409436d615ea75babe8c69595fd45e18f9bc25b7e7db60e958dd919ea771a74eb96a","ssdeep":"","tlshash":"2dd097193100a82acba201206fbee232fb20fa7c53c13430e8d203a30f404439c21334","first_seen":"2026-09-18T08:09:14.344553Z","last_seen":"2026-09-18T08:09:14.344553Z","times_seen":1,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/api/verification/init?session=285d60ik98nmu6ogapw\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:09:08.462Z","timestamp":1789718948462,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-iad-10.linodeobjects.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 17:24:22 GMT","end":"Wed, 09 Dec 2026 17:24:21 GMT"},"fingerprint":{"sha1":"23:D7:6E:C0:4D:FA:A9:22:93:0C:80:A3:BE:4A:50:D3:AC:10:3E:37","sha256":"F4:4E:FA:7A:FE:76:13:F5:76:94:88:D7:ED:10:45:5A:AF:89:AA:AD:15:12:3A:C3:25:47:24:52:B4:9F:8A:36"}}},"request":{"raw":"GET /api/verification/init?session=285d60ik98nmu6ogapw\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: mxoff-standard-v.us-iad-10.linodeobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 18 Sep 2026 08:09:08 GMT\r\nContent-Type: application/xml\r\nContent-Length: 253\r\nConnection: keep-alive\r\nx-amz-request-id: tx00000759e8e70a2ba7ee8-006aacf1a4-1536dc29-default\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":253,"size_decoded":485,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"5f680b62b3b7d5bf5855384d74f3d32f","sha1":"89c6d50ac286e0111c722450aa064c62f3983d94","sha256":"f82aa5427326f410aa68b46ea2c0a423357b08e7712cb39e2c8b074b0c433f1c","sha512":"633eefbbcd4246b2a805d9907e627387c5c12d14c61aa72e0f5d62cf0e179804622673869fdc2b7b753e93a8d207c24c56b556c2db21351ec088e354b4333c98","ssdeep":"","tlshash":"9fd097193200a93d87632031ab3efa76ba35b93d13d03030e8d203a3ae800a3ac14b34","first_seen":"2026-09-18T08:09:14.345996Z","last_seen":"2026-09-18T08:09:14.345996Z","times_seen":1,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"panel.mobilyabirlik.com/api/verification/fingerprint","fqdn":"panel.mobilyabirlik.com","domain":"mobilyabirlik.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:08:50.101Z","timestamp":1789718930101,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/verification/fingerprint HTTP/1.1\r\nHost: panel.mobilyabirlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/\r\nOrigin: https://mxoff-standard-v.us-iad-10.linodeobjects.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T10:41:48.502002Z","times_seen":18531817,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/api/verification/init?session=5jp9wrllpzxmu6ofylw\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:08:52.767Z","timestamp":1789718932767,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-iad-10.linodeobjects.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 17:24:22 GMT","end":"Wed, 09 Dec 2026 17:24:21 GMT"},"fingerprint":{"sha1":"23:D7:6E:C0:4D:FA:A9:22:93:0C:80:A3:BE:4A:50:D3:AC:10:3E:37","sha256":"F4:4E:FA:7A:FE:76:13:F5:76:94:88:D7:ED:10:45:5A:AF:89:AA:AD:15:12:3A:C3:25:47:24:52:B4:9F:8A:36"}}},"request":{"raw":"GET /api/verification/init?session=5jp9wrllpzxmu6ofylw\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: mxoff-standard-v.us-iad-10.linodeobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 18 Sep 2026 08:08:52 GMT\r\nContent-Type: application/xml\r\nContent-Length: 253\r\nConnection: keep-alive\r\nx-amz-request-id: tx0000081d46f993c85ddf0-006aacf194-1536cbf8-default\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":253,"size_decoded":485,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"36f4288ecb762c25b56cb1924e6533fe","sha1":"73cf944598982637bb28ac593036de457c337ff5","sha256":"32194f5bbadf6671fedfbaeffd4adfdf63e5cfdc966a944b90d64b6e7da28e98","sha512":"0d5f5f2cd4b706d7583a2b9d6edde9e134f5087acbdf73721765a69c04ef7177ca932d10611c6277cad09c19497960e0c08597362d84f739397f0f251091f431","ssdeep":"","tlshash":"58d02b2a3104e53883510422663ed225bb14f47c12c4783098e506530b000930d30b30","first_seen":"2026-09-18T08:09:14.347194Z","last_seen":"2026-09-18T08:09:14.347194Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"panel.mobilyabirlik.com/api/verification/init?session=285d60ik98nmu6ogapw\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"panel.mobilyabirlik.com","domain":"mobilyabirlik.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:09:08.422Z","timestamp":1789718948422,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/verification/init?session=285d60ik98nmu6ogapw\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: panel.mobilyabirlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/\r\nOrigin: https://mxoff-standard-v.us-iad-10.linodeobjects.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T10:41:48.502002Z","times_seen":18531817,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panel.mobilyabirlik.com/api/verification/init?session=ddkq4tjx2stmu6ofvst\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"panel.mobilyabirlik.com","domain":"mobilyabirlik.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:08:49.314Z","timestamp":1789718929314,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/verification/init?session=ddkq4tjx2stmu6ofvst\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: panel.mobilyabirlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/\r\nOrigin: https://mxoff-standard-v.us-iad-10.linodeobjects.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T10:41:48.502002Z","times_seen":18531817,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxoff-standard-v.us-iad-10.linodeobjects.com/api/verification/init?session=rud1jae39kmu6og1vh\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896","fqdn":"mxoff-standard-v.us-iad-10.linodeobjects.com","domain":"mxoff-standard-v.us-iad-10.linodeobjects.com","tld":"us-iad-10.linodeobjects.com"},"ip":{"addr":"139.144.196.12","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html","date":"2026-09-18T08:08:57.001Z","timestamp":1789718937001,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-iad-10.linodeobjects.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 17:24:22 GMT","end":"Wed, 09 Dec 2026 17:24:21 GMT"},"fingerprint":{"sha1":"23:D7:6E:C0:4D:FA:A9:22:93:0C:80:A3:BE:4A:50:D3:AC:10:3E:37","sha256":"F4:4E:FA:7A:FE:76:13:F5:76:94:88:D7:ED:10:45:5A:AF:89:AA:AD:15:12:3A:C3:25:47:24:52:B4:9F:8A:36"}}},"request":{"raw":"GET /api/verification/init?session=rud1jae39kmu6og1vh\u0026flow=prt\u0026prompt_profile=default\u0026link_id=lnk_f1e5cc7c63abe896 HTTP/1.1\r\nHost: mxoff-standard-v.us-iad-10.linodeobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mxoff-standard-v.us-iad-10.linodeobjects.com/rsa.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 18 Sep 2026 08:08:57 GMT\r\nContent-Type: application/xml\r\nContent-Length: 253\r\nConnection: keep-alive\r\nx-amz-request-id: tx000007180c6cb34f51458-006aacf199-153757fa-default\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":253,"size_decoded":485,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"c21a11ac4dee6b7d50a23c6bcb7274d4","sha1":"519c21069b856ec9526a058b68037b28d0a35cd9","sha256":"b376fff01a8d1ecd70c05807a0cfab0408cc7acfa3d9d455717600a77993e5c4","sha512":"25f92530f561e203a32d4092f64165cb49cf4549aef2a145eda65e9bb78e6e04233b8da369c854a21df4373bf10c89dfc66eff63a27dcbe7a539b8c0b97fd0ec","ssdeep":"","tlshash":"d6d09535f104f52d836144165bfed531ba12f47d13c0742c5cd607d34e100634c10330","first_seen":"2026-09-18T08:09:14.348533Z","last_seen":"2026-09-18T08:09:14.348533Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"mxoff-standard-v.us-iad-10.linodeobjects.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}