{"report_id":"93d1d38a-93ba-4bc1-b50f-08d32c10a722","version":0,"status":"done","tags":[],"date":"2026-09-14T18:48:51Z","url":{"schema":"http","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"172.67.133.184","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"title":"koç finans – seçim testi özel seçim programı | Trading | Off","dom":{"size":142915,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10409)","md5":"92b59124bc990f39c008caeca37cd81e","sha1":"d3389e414a4d46138f83736f73fddf57198edeef","sha256":"097c4a686e51561386cebeb350722347c104ba99afd3cd29361bc09fc4a4781a","sha512":"d6bcce9f7bef71693067291831bfa0c582ca565187eeb746b08855ce2615103cf34dce5c8110782129282ce4e2c748b0ef1900f67a8fbabc17fe503a8f00007c","ssdeep":"1536:5Cd/C07eTuHMO+SZr7sOy2+UBH4c1IRPCikFKZzwMylwOACOw3v2Pu5h3vH6:Mec/+SZhID1TdC4Puza","tlshash":"18d35b25d4cf117b1a2201cb758b331b2298c1eeff9194ceb56ce12c1bd5f625229b9e","dom_hash":"domhash51b8c72ae83b4402fe33931c64720e30","first_seen":"2026-09-14T18:48:53.628204Z","last_seen":"2026-09-14T18:48:53.628204Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"172.67.133.184","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T18:48:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":5,"received_data":324260,"sent_data":2918,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-13T23:16:40.429603Z","alert_count":0,"request_count":1,"received_data":55968,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kocfinanssecimtestiozelsecimprogrami.click","ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-14T18:40:45.274909Z","last_seen":"2026-09-14T18:40:45.274909Z","alert_count":64,"request_count":16,"received_data":364241,"sent_data":10025,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ClientJS:0.2.1","description":"ClientJS is a JavaScript library for generating browser fingerprints, exposing all the browser data-points.","website":"https://clientjs.org","common_platform_enumeration":"","icon":"ClientJS.png","categories":["JavaScript libraries","Browser fingerprinting"]}]},{"fqdn":"static.cloudflare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2026-02-26T11:11:38.239945Z","last_seen":"2026-09-12T15:28:28.235074Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":984,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":6795,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-14T23:37:41.050281Z","times_seen":128100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"2dc23a40eff0b697e9b9792e5ace5fc6","sha1":"3f6cfcd198373135295181502bee45421c9e3331","sha256":"f111c7298c66c7cac276150504872939030fef4ca6d4e62e860be76be3bdf8d7","sha512":"97de1ed4ca646cf2f1e037e7c193e44c1c3a6af06922aec2dfda10f5d986fa77f99ab7045a56f0ffbd51b2ee455ef88397f6546a004fee41006a5abe748cca0c","ssdeep":"","tlshash":"42a02280288830bc232ac20002322b322332838b8800008ce0a0880c388808fe0b0a02","size":65,"data":"","first_seen":"2026-09-14T18:40:49.529836Z","last_seen":"2026-09-14T18:48:53.640143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0abc945169649a8755ed8b3457049185","sha1":"05c763d704f34daa38c5d365b9a886eb056874a1","sha256":"f1cf82ef8ce5deb3fa3b2e8613ac356bbbbd8470f921956c940c1bb9590284de","sha512":"675195012e901c3d68031f8f986d81469a11e0cd77bf8eca022b438650b1f341659ba0fe56fd4f94ad7f7bec17b57f4de554d4033de6d6a5224b6354122e0d8d","ssdeep":"","tlshash":"71d0a75de620a76616f29130522ffb1259b341d70d409950491ade40ea38f8e92368ef","size":223,"data":"","first_seen":"2026-03-27T21:45:01.945196Z","last_seen":"2026-09-14T19:19:11.714366Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58831d1e62fe810505d7beebf26e8a25","sha1":"ca6210e27ea2a721dde7cecb4378712dacac8581","sha256":"7a923300adcce6174841c53483774d990afde64369c390c3f628d6b3cd7de53c","sha512":"39249dacf5533e96603e7d0623e7671e3f29fed91fdc873cbad8de571414808def11608d34af267d1f292286484dce65086590786cb22f7b252ca62ab294f53f","ssdeep":"768:FsWL6tEaCikFKZ/7IH3tt38F7/qJeQgNOGo03svughfwBcwhuZVhqCOw3rWBDHs9:uPCikFKZzwMylwOACOw3v2Pu5","tlshash":"d363e725c9df549b0e2011cb688f3b2b539cc1fcffe1a9da8548f81c11d9762a51ce9a","size":70371,"data":"","first_seen":"2026-03-27T21:45:01.947507Z","last_seen":"2026-09-14T19:19:11.714894Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6894c5c101310659202275ea2d21808a","sha1":"3498e85d4d4f7821368b12bb8cb33d868ca3d70c","sha256":"7493896df4416a287e7765f375a7d640673dcc3022fe766a4f208f004fd7f6e8","sha512":"552811576f537b7603196e230b278af29542a685d6fa46926812aaf6743c0c82ca668d23faa97e7abbe6290b705fe006daac53860c9bc63f3b4cc07d4411b326","ssdeep":"192:rBabKFkwLl4oaKLgkLFdMPT17hc5nXXJ6cRDNkBkUbanRLjEBzwQ1laq2glP9X6w:DYwnpnnBgbanO9T32+suP","tlshash":"d15294a9b83b057518f7106f2bdf6381b570848f69c5d84dbe0c74242fa8f463a2a7e5","size":14498,"data":"","first_seen":"2026-09-14T18:40:49.527507Z","last_seen":"2026-09-14T18:48:53.641698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6424ad0b336dc79d47ad3f0e6226f997","sha1":"d338e1977e511160391645671eb3d39f5f024a98","sha256":"116d10f7ddf8a628b197ec8339d9ef26f0375abe4c7376907e706c977e78d73f","sha512":"de710bbeb7b7c1f48fd2efffbc7e566ad2c59b958166d4e30e85394de0e4cba7cd1ad015556aada0c26b6977fc18c98f6f927d8af6512857a866d39683d0168c","ssdeep":"","tlshash":"04c08c206324aecc9023c1202f0b2b00a308c82b2835f390a7b08e997a0348b44c889a","size":141,"data":"","first_seen":"2026-09-14T18:40:49.52875Z","last_seen":"2026-09-14T18:48:53.642239Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-09-14T23:48:39.798858Z","times_seen":365671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b6a46b3fb2ab9307d013def98fd7289","sha1":"b45977827f6c96e0cdc9b73c489776ea81559938","sha256":"aa441106c183f4866b729dfc92f96a0bc97bccbf28f5c29b56053f71752ab196","sha512":"d962c6341a814b3f873175ae83221d90936be9f3da9ef5ec8e3e62bee3339b3b4d80a55a247248727ead92a995a15e0428961dce52df362d0ed4added44b5601","ssdeep":"1536:rnY4IOlII1MDSw4UnIASVg8fljAWgfPMatSsC:LY4IOuIu4+I6fUSC","tlshash":"a8434c9eb1cbb23947aa3195c13f4845377a45198c4cd0a8f9f1c9a0bd78a9d006bf7e","size":55174,"data":"","first_seen":"2023-03-07T01:42:50Z","last_seen":"2026-09-14T19:23:38.439718Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dd51bf58e18b1db566ad93f19e506c7","sha1":"906ba56d8a88a8505369ff5549f2498ae88b859c","sha256":"9345d27493504c8c9bbd19e5e0aba16099cfa6903089479811ad93ad99bdd543","sha512":"8faed9bc6f1ebac530c5e3ef10c8f2f96cf5c96030cf85bbfb2dd63abd98f60d170c03a1c392458882bac2d8a6113faceb9c516ff0e40e7c86403be22eb6c8f9","ssdeep":"","tlshash":"c860003030003cc3c00c0000c0000030c030c030c0003c000c00000fc3300c00000030","size":14,"data":"","first_seen":"2026-03-05T09:10:23.48722Z","last_seen":"2026-09-14T19:19:11.718661Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.235Z","timestamp":1789411701235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/solid.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3416535\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rgu20lQhN4xPYVdxtpKprs3vOCZqMLImao5uvXyoyCn5wHrmHga0fo6gpToPm%2FE6665eqxwC%2BY3FzXRcnjBy1MqRW0n9PmOjCFunF2JB0i2RWVtKzgiT3uVuNau5wkz30fypT0GK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3b190bccda11a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":1289,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (353)","md5":"4d63c1a82931dd3b2d8ba3135987b9c3","sha1":"b79ead6a4a6548ec021c030e9b0e95c9ba0648e7","sha256":"b8afa4243dd1bf735f512708da5335b0ed314d9e58a0a1cf1b781250cf5fb004","sha512":"a5994a1acee712a178ce81b47a078ad7aee5eb2a2fb2e2fc6a9df4774ee403900952af96cac165434d832d70263779f4f87dc9573e678bc489667ace6985d604","ssdeep":"","tlshash":"51f08b1d056504a042810d423c8dfa9dec02b0da7ca84b53f137986d98e9a5f31f8f18","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-14T19:23:38.383083Z","times_seen":911,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.237Z","timestamp":1789411701237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/clientjs@0.2.1/dist/client.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.2.1\r\nx-jsd-version-type: version\r\netag: W/\"d786-tFl3gn9sluDNybc8SJd26oFVmTg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\nage: 2403239\r\nx-served-by: cache-fra-eddf8230144-FRA, cache-bma-essb1270079-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55174,"size_decoded":22004,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45676)","md5":"5b6a46b3fb2ab9307d013def98fd7289","sha1":"b45977827f6c96e0cdc9b73c489776ea81559938","sha256":"aa441106c183f4866b729dfc92f96a0bc97bccbf28f5c29b56053f71752ab196","sha512":"d962c6341a814b3f873175ae83221d90936be9f3da9ef5ec8e3e62bee3339b3b4d80a55a247248727ead92a995a15e0428961dce52df362d0ed4added44b5601","ssdeep":"1536:rnY4IOlII1MDSw4UnIASVg8fljAWgfPMatSsC:LY4IOuIu4+I6fUSC","tlshash":"a8434c9eb1cbb23947aa3195c13f4845377a45198c4cd0a8f9f1c9a0bd78a9d006bf7e","first_seen":"2023-03-07T01:42:50Z","last_seen":"2026-09-14T19:23:38.439718Z","times_seen":799,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/terms-popup-mobile.svg","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.246Z","timestamp":1789411701246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /terms-popup-mobile.svg HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3b190bceb01c4bf-HAM\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"5afcf50a79904fc95ca961d1b3b38197\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B4KNO%2FSOsaCPX3G6bMtheDWjYAzzc%2FyqUqs1HZz8GCg%2BH8vAOv6Jq3gsi2ipF9y4UOuZMYXcuZ5YGiMdpGl9Awhq7hQNzCCNywiEkdO8Pkqt%2Fxy3ORDarym921oIGPtSNAD9NLpTOPDIwM%2F1m5NqMyrC7bxFvNi9xx9oBsk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3686,"size_decoded":1972,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d01341ffa332dd2c07e562e5ca1704af","sha1":"391925255590e7447ad3c938456bcbf21132e556","sha256":"d3c915921040d448ec8f0f6e2d9250d0f91d560a35ebfdfcd9000348b814fed2","sha512":"503eef7ad767bbdf187a64c702544bb2ed08b45f65c1a1cd76719da4154694ea622e34f4479a53ca10991d594dcde7674fb23ac01195223dae44b3e0917bcff6","ssdeep":"","tlshash":"e9718bd1e3ca072df249cb65c346a3bfa7a1d55cf25ac15449e6820aafc3c4685cb0cb","first_seen":"2026-09-14T18:40:49.519171Z","last_seen":"2026-09-14T18:48:53.63076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.341Z","timestamp":1789411701341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:48:21 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RK9RCBmpeP2l%2Fp1VynK40qfFzKB4BKVH5hpYcfRr%2Fnnfn3z41BoRb0lJ07%2BH1HI02hu3xXPpfKRYK0CMmHMvqFlrwoDVxD3ZEDLsXrexNX43MODPVyLEKhLud5a1YRoMfyhdGEr48YvXH64ObfO1ap%2BeWBOuX6avXCvVEnE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\nserver: cloudflare\r\ncf-ray: a3b190bd8b08c4bf-HAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4599,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-14T23:37:41.050281Z","times_seen":128100,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/disclaimer-popup-mobile.svg","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.485Z","timestamp":1789411701485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /disclaimer-popup-mobile.svg HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3b190be6b22c4bf-HAM\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"a69000c8b7fe24962ed1a81dfa2e6e82\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlvLBokFB6dUblNDJPZ3PmXF5wB4QXFjaBWbhOdRnvmxnZUJBY%2BYsdk6zSC8oopQkpGBePsWAd%2FJCS%2BJScKms8Y32zRWWlsV5qKczULpZi5ShG6%2FqCblZhE%2Fz5PvHdznrrU7%2BjW6TkMH%2Fm8RsNpRihIVaJURhoXZgt4I95c%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2912,"size_decoded":1770,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76c96d4da4740b0fb63fd0edcd5b11fa","sha1":"e1f6d45fc99c5f512981ba7c79a7bca8ec52874a","sha256":"7c7b7d327133e009dde4a41a898d788ef332b584a8a2a905c37ecc22ae5715f8","sha512":"fc1966ad490b25764a824d88f7768635e4ca61b9a9b1b87f0fffce9fff51e24f5cc812c8a90e389e0743667d4da24d83dca262583ca5ae05f849e95d5dc79d6f","ssdeep":"","tlshash":"d351acd2a2c80b39e24dcb68c35aa3bba6e6d55ce756d1744ce1060adf83c4685cb0c9","first_seen":"2026-09-14T18:40:49.513712Z","last_seen":"2026-09-14T18:48:53.632293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cf-fonts/v/rubik/5.2.8/latin/wght/normal.woff2","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.539Z","timestamp":1789411701539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cf-fonts/v/rubik/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9L%2Faly76s3h9UUpEDq9LmxpuSLwj6ncs0o%2BjBDMPeFTqICK9out5DYZhFjknSJEqhBRwpODGQMpEnjx3kcAGaygea92UYjRFXYFFPTG4nxboR%2BNSaodFbaFYw5M2el8admo8vMEVSm07mNKol9Pe6RADNSZ%2BrlYGPpqFyAo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3b190bebb28c4bf-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":35987,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-09-14T18:48:53.632943Z","times_seen":3957,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.225Z","timestamp":1789411701225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nOrigin: https://kocfinanssecimtestiozelsecimprogrami.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3322563\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sm%2FRbQHE9%2B0epyFGbYve3xaEgGMmhPhZOj2acTHItUyQq8NGjhPNsdqEujbnWBo6EZaRW1ftso3kVatOdk%2B%2F15J9zYgR3RpPEotagRgfay2FkvqfGQJ7Zv4xtfBLPng2JugBACRs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3b190bcbc12b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14629\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80795,"size_decoded":15636,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"050a20fcaed9e77ff3c43b7aae625283","sha1":"397e1e16117c1a4166e52f424e2ae4a2b5fcbe09","sha256":"8eb5b44ce5971a501e5a17954c464b80aba0c4604675b5603a7f456459af88a1","sha512":"774a2534ddf90ba54b8ae940a1bc581d9897266abebe5f81188800c50b43e7e92ab9dae8ff134cbefdb220701c8861e9131b086ca5f788b83ed01e9dd24e3e64","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9f:O709gMGFiyPG9f","tlshash":"ac83cbf5e44c15d97732c44beb58b37c61b6f738d9810da9f02f580d1ac26a822c6b7a","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-14T19:23:38.382444Z","times_seen":2811,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/styles.css","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.229Z","timestamp":1789411701229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-ray: a3b190bccafdc4bf-HAM\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"ce466b132839c1ff36fdcbedf26a7580\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZdxJfCQya83gkwkAiI651Rcu3B0vaoCCrvlMPiP5GNdzw%2BpeYSv7%2FIQ2Kbiaa7QonjCXLD9E8UrZ3HWfUKR0S%2BGuf3yvk6YPNuD8L898ppIbORSXlklM4haQyjbhN5PTByNFZKwQqHf%2F7mvyFBVMJeYyLdA8rMPB%2FXcuqs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21956,"size_decoded":5861,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (21956), with no line terminators","md5":"9de94c9343f8fe5fe7425ac9e213d4c5","sha1":"3edc8e90e9b1bc7f8248ea192ad2dc2ab29b1869","sha256":"1633a5eba57579a9b508c108aa814fbcf96b42c4a024130bf21dc47c250fe4bb","sha512":"6ab381e6eea05bee3b7f68b2d49f468d3dcbbd3cc49de2dafb5c1d0d698afaaaf38545f50165ed1aa9b6981e4159a0b31165908f8509b2a8f7a2002cbc78bc22","ssdeep":"384:P3R1rkK1cAAq6llyq5yZkEOI+NS7H7glWIbsTGXq00/6hn:PF1cAclyq8B7H7ss8s/cn","tlshash":"64a2a862e610323db42bd55aa6c4638f7124e412ea2707aded635239cacb1f74b75b0c","first_seen":"2026-03-09T15:32:07.319813Z","last_seen":"2026-09-14T19:17:19.667561Z","times_seen":29,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/terms-popup.svg","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.245Z","timestamp":1789411701245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /terms-popup.svg HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3b190bceb00c4bf-HAM\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"e25b917f638ee24bb15fa8ea680881ca\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4Nrn4%2FEz9D1faQbzUtaMTwK8d5bRCk%2BeFUlMvjZvIIZ69NSlgGjfHkksQfSvLxb%2FedLjjfBh9TvIuuZyGsounjw4NxjVyyzYcp93ihsIBGfOKMyTMP1FbPBBaTcw30AWa53Wod4PsZYKD3WzOH0h%2B5HfnAuo8UuuEfQAt8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3128,"size_decoded":1963,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76bba8eb8532bc9b1b83034701ca50ec","sha1":"61faa9fd176922e28d3c11f143aaf4ef6ec8ba52","sha256":"a9f97b4be029061247d34aebdc8e70c28c45a6a892efab42ad927c58534e33e3","sha512":"e48a653a775d4f77f4be1362f785e23d2459a41a00f3020da645c3c625acec0c9971e354c6ccec6b4c4c004c4e0677a20d6d23613b7392c6bb39a75ee9df1e6f","ssdeep":"","tlshash":"b2513082d1ca0b2ef7498b85c346a7fba7b1c55cf39ac2640de5024927c3c0681eb1d9","first_seen":"2026-09-14T18:40:49.509496Z","last_seen":"2026-09-14T18:48:53.63454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cf-fonts/v/rubik/5.2.8/latin/wght/normal.woff2","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.541Z","timestamp":1789411701541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cf-fonts/v/rubik/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXLlhtTCQXMVUXWI3GF%2FGg1VYRRbzxNaRg90mIJx%2FBzxr4g6VRPbAEdAdJDZSMiemrcU4c%2FE4fuiTHXUkqsAfhem%2BHpQB%2Bq%2FFTRTJjBzIbCAKJBKt8v43qIcObvEiW586XtAHIKAS4x1PW%2FiDL%2FFYGo%2F0zbu5M7txTUptGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3b190becb29c4bf-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":35997,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-09-14T18:48:53.632943Z","times_seen":3957,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/favicon.svg","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.650Z","timestamp":1789411701650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncf-ray: a3b190bf7b38c4bf-HAM\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"2c4fe311c6b1bf2d58ac7559a5d87a96\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qTOIxyZyBbNckCXVyoQpxuMtbTtw04XIxOY1re4gDFMyBLBjssOBb%2BRRqcBVqinUKCorTwVKEM0m5BKgS1aQU9RcHpKvWzkypaQ687ouVCO2opwFkpksBneg0HiD57fTsfJTd3Yga9ub9FhyO%2Fq%2B%2BCu1qOaHvr1YvxK6Rc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":1107,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08949ed74c84253b10af7a4d8eef9340","sha1":"59329f106104505464c4bc1c22e782a927ad5edc","sha256":"fafc723b0d8ca14831d01b3d7d8ca8cd551fab2f78c09379befcff9fb11a7759","sha512":"2672f2dbf3c557c10b0ffcdba428876b6f39cdc147934c5b16274f6d1e304e6a550b919d003ca8ef760fb1a38998539a4ffd79a673caa28d6edf696c89d27952","ssdeep":"","tlshash":"def059da938c0926d32586a8bb093a6613cfc2d463499970f691387b80119eb68ff09c","first_seen":"2026-03-09T15:32:07.322541Z","last_seen":"2026-09-14T19:17:19.66677Z","times_seen":33,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cf-fonts/v/rubik/5.2.8/hebrew/wght/normal.woff2","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.667Z","timestamp":1789411701667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cf-fonts/v/rubik/5.2.8/hebrew/wght/normal.woff2 HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IGmM9ClWZEbKHgTEwRNOx0K2AucQIdB3OTcEu4Q4QUJcZeM93TSl09i1QkgqnT707wwS5MpI0x%2B%2BiDHCc42xLuem2YwrFKo2qptzcGTlGs8D17%2BV5H%2Bm5Zzbz2N2cbwST1m5UaeCBwIbAJ9lB9s1egaktUCBCB%2BbK1nN54%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3b190bf8b3bc4bf-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9348,"size_decoded":9988,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9348, version 1.0","md5":"bda074a677ba3677e48b3403660e2d9c","sha1":"119f25217dbc125e0f189c59f5e514a3319d15a7","sha256":"197b6dbe5c6bec7276c59b02d70a16ee6acd44322fc2f8d0226c07f8d57976c2","sha512":"2b9d0ff78a278fd534d91e9416209fe0ba3fd35147faf7be5bbb9a8d0a64582dde7a979ce7d6226a9ecb8ab318661035edbbc86da3e9acfa71bbd79f8784a876","ssdeep":"192:aTH1Xb5qCNBDjXFK3kFpHVEkrOmlFX1E8nmzh:aJXlN1DSkFTEZmjVq","tlshash":"7312c080e855a1127681417fb3c0d9a7be460e1998737b3c704ef068ff57c5a69c2272","first_seen":"2025-09-24T00:46:33.962121Z","last_seen":"2026-09-14T18:48:53.635555Z","times_seen":38,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T18:48:20.588Z","timestamp":1789411700588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\nx-content-type-options: nosniff\r\ndate: Mon, 14 Sep 2026 18:48:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3b190b94abdc4bf-HAM\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=216, s-maxage=3016, stale-while-revalidate=96741\r\nlink: \u003chttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css\u003e; rel=preload; as=style; crossorigin, \u003chttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css\u003e; rel=preload; as=style; crossorigin\r\nserver: cloudflare\r\nset-cookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F; Path=/; Max-Age=2592000; SameSite=Lax; Secure\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: accept-encoding\r\ncontent-security-policy: frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com; img-src 'self' data: blob:; default-src 'self'\r\ncross-origin-opener-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hf%2FS9DUZCbdfutQTpWV7c%2Fn1tOR8qX17h%2B60wlU24Xwthlzbaa8NjbL79u03cYKwwm8cid1%2F3auqcsipXA5rVSeTUdAgJjvSTje%2BZ8%2BUAIkOs6KIHcyomvHH4ymnlXF1txSVXb8CgBIRhxiKfz%2BEjvr1NQX3gBu1EGiGCC0%3D\"}]}\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"entry_url","value":"https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F","quoted":false,"path":"/","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F; Path=/; Max-Age=2592000; SameSite=Lax; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ClientJS:0.2.1","description":"ClientJS is a JavaScript library for generating browser fingerprints, exposing all the browser data-points.","website":"https://clientjs.org","common_platform_enumeration":"","icon":"ClientJS.png","categories":["JavaScript libraries","Browser fingerprinting"]}],"data":{"size":142972,"size_decoded":42601,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9969)","md5":"99bec37eb633d02e798160660a29631f","sha1":"d257d10d0d59aaf2e8940f011c188c9752642283","sha256":"0dafea96b1e808e9441195960f33f148ad5605fe7d779d2c8ff4257b743a189e","sha512":"82ee49ec41002500267e8120377fe0f1eedbba2cb06337181c7bc32d2073af2f1a327255814aa388874c4c3affe74431152764b6a53e8c028807bd1e0fd43416","ssdeep":"1536:fCd/Ci7eveHMObS3NZHOZ2+UBH4GTPCikFKZzwMylwOACOw3v2Pu5h3vhb:oew/bS3rh1TdC4Puzd","tlshash":"4ad35b21d48f117b1a2201cb758b331b2298c1eeffa194ceb56ce52c1bd5f62522979e","first_seen":"2026-09-14T18:48:53.636035Z","last_seen":"2026-09-14T18:48:53.636035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":26,"connect":45,"send":0,"wait":167,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.233Z","timestamp":1789411701233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3322563\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqeCs8TEuZwbu34xtuH7CKXzwfifAJ8P%2BMcd%2B%2BIvvFvPnF07RypRUnr0t1Y8PF7UhjvfikBclZhoOXw2UhUcAUJ47givazdb9NpsrdpDVVfLRDZeCaz2aYlQLS%2B9%2BMAqat2oTMu4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3b190bccda01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14629\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80795,"size_decoded":15638,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"050a20fcaed9e77ff3c43b7aae625283","sha1":"397e1e16117c1a4166e52f424e2ae4a2b5fcbe09","sha256":"8eb5b44ce5971a501e5a17954c464b80aba0c4604675b5603a7f456459af88a1","sha512":"774a2534ddf90ba54b8ae940a1bc581d9897266abebe5f81188800c50b43e7e92ab9dae8ff134cbefdb220701c8861e9131b086ca5f788b83ed01e9dd24e3e64","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9f:O709gMGFiyPG9f","tlshash":"ac83cbf5e44c15d97732c44beb58b37c61b6f738d9810da9f02f580d1ac26a822c6b7a","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-14T19:23:38.382444Z","times_seen":2811,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflare.com/beacon.min.js","fqdn":"static.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.239Z","timestamp":1789411701239,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T23:51:34.565493Z","times_seen":18467719,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.382Z","timestamp":1789411701382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:48:21 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPmV%2FIutQPJCr2MFCbY2h1LyzOAIsiWzjPxjC3TXR4pKmSybpJALMFjqZ8ypEvTqO9ShnIOY%2FfiFeh%2B2gB6Fz%2FpxaqwuoPmVsYICchk81DVjycFirRNN5MgRE00Myb8QR88Dwb308LAgRFJb%2FR1WXsS1YD3XkZRZfhWuCo4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\nserver: cloudflare\r\ncf-ray: a3b190bdcb0ec4bf-HAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4603,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-14T23:37:41.050281Z","times_seen":128100,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.423Z","timestamp":1789411701423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:48:21 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6M2BUDQSSQ%2BUNhCXDnOHFwQX1to4HSG8xAXHJy4jZZsof2i56t4sBi0AFGP34NmI8BYp%2Ft%2FQlvX3%2FREDmApV0pUPLkvXicKlxa4xuryIFf%2FBjPjp6VWitJ6ji25hAHctTJ8g3lBZeZb3cVtahaZZSpS3J2VjKnzp34E13w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\nserver: cloudflare\r\ncf-ray: a3b190be0b16c4bf-HAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4601,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-14T23:37:41.050281Z","times_seen":128100,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/disclaimer-popup.svg","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.483Z","timestamp":1789411701483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /disclaimer-popup.svg HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3b190be6b1fc4bf-HAM\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"9185bd7df89e54fa1dd006882ee8b668\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8DKhJFc%2B31%2B%2BDRWfo4GfGk9ChuIRRrcGVXrt36jtjWLtOeznnOsFRCE0TcdZSl0gG8CoRniwbYz25nIBOvJZTB3Vx%2Fx4o1jUBFravBrmUq%2F%2FKGLUrDFAIt4c0pseITdS2e%2B83gspOyV0nyemFzdMP0CV2fpjk20XDeQB%2F8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2075,"size_decoded":1758,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59c0a5f5ea8c74c0fddc54aebe01e974","sha1":"e7cfcae09cef90c91d42cae74b99ef7d327bc786","sha256":"0931bfd153f6013432b818af20f329ab316dd24cbd17d811834e7b7e36b519b9","sha512":"6a7826c191d62e83474022de161f73df3a0fdc47ecc6e59f98150b7807721153f73570510c346dbe83b7b9f76d1d85c0ac12cab82c997c1398e3e2fff58cec89","ssdeep":"","tlshash":"134123aa91cd0a26f6868048d5e6bbd7b3f5d05da348c1941cd4002c9bd3c4ac5d76ed","first_seen":"2026-09-14T18:40:49.516954Z","last_seen":"2026-09-14T18:48:53.637454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflare.com/beacon.min.js","fqdn":"static.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.487Z","timestamp":1789411701487,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T23:51:34.565493Z","times_seen":18467719,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.228Z","timestamp":1789411701228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/solid.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nOrigin: https://kocfinanssecimtestiozelsecimprogrami.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3416535\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfRzHGCdT5GZOB1QWrRYaEj0mY2KqfF0UPVSTFilu%2FK5Da4yGnWUb1nPWEK8BG7Uodm1hc%2BvRcf2elVKBKG9s8ipAAiTTG4i%2FYLtzPOBQJzTNwftPh3Q9MZZHN1UVXHKPsgayQPg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3b190bcbc11b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (353)","md5":"4d63c1a82931dd3b2d8ba3135987b9c3","sha1":"b79ead6a4a6548ec021c030e9b0e95c9ba0648e7","sha256":"b8afa4243dd1bf735f512708da5335b0ed314d9e58a0a1cf1b781250cf5fb004","sha512":"a5994a1acee712a178ce81b47a078ad7aee5eb2a2fb2e2fc6a9df4774ee403900952af96cac165434d832d70263779f4f87dc9573e678bc489667ace6985d604","ssdeep":"","tlshash":"51f08b1d056504a042810d423c8dfa9dec02b0da7ca84b53f137986d98e9a5f31f8f18","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-14T19:23:38.383083Z","times_seen":911,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.466Z","timestamp":1789411701466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:48:21 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xvi4%2FgBplY5zcuUaR8CXsr8hU1PqlqVYdOD4Vlk9wzSx2uo3poS1V5Sj1%2BJ0P7kVKON5167%2F%2BDe%2FgAkNrvgpOv1hr9WZyP%2BgHasLeItgyC%2BLaLAIhp2ZUm6yd0TrAgV0FiBiYSqHGgEvtiaxTxXZqqU9pGfU%2F4lE6ZeSOCo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\nserver: cloudflare\r\ncf-ray: a3b190be4b1dc4bf-HAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4607,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-14T23:37:41.050281Z","times_seen":128100,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.543Z","timestamp":1789411701543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kocfinanssecimtestiozelsecimprogrami.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2470259\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndlUcsJdEXHx7dGLSI32IC%2FbRKGTkY8xXh0T59LSnU%2FmK%2B5x%2BJ4h1Jm%2FXvrW9QKCqteRLhtG3CPGF%2BM1KbsQgu4hf%2B5RSsXTa8kzC4m96Oi2cpi0qWhsb8IszUd%2BmZFQXhjUBK1q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3b190beac28b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":157506,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-14T23:13:26.103027Z","times_seen":52353,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cf-fonts/v/rubik/5.2.8/arabic/wght/normal.woff2","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.581Z","timestamp":1789411701581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cf-fonts/v/rubik/5.2.8/arabic/wght/normal.woff2 HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prLvvZNcPA6VbNHagREf5Lfmc0i88kAA1DHnIGhq6S0uWAHyQ%2BxVAyE7dF1L1DInYk2XQF7nUHlYfUpmkfdi%2B9PQDOLjUm0vCcMjywJou3g2odCMjr%2BaQhgNL49IaDKrEeIkD%2F0Nv4lVWfSR3PwvYLx4DW6O3MSnYAqeakU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3b190bf0b2ec4bf-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32468\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32468,"size_decoded":33107,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32468, version 1.0","md5":"d2ec73878cf61f47b3e614d52bd05fcf","sha1":"98599417c2696c0ef9f50fc67c0ad5dd152c8ccb","sha256":"f5052e4870bf211fc22df5b85e791a292a77b9baef8cef1dc5a8e62a783ea1e0","sha512":"01e28ea3672bc7e613ff045734bd050be2416291d2280dbe03d39d9e280f76f8c0ac3256dababe59d405ea619407a5ea428c487f962c1aaafa5ea0f7cbe44e78","ssdeep":"768:r6nLGRpuki7h7Dr9L+xpL0dbno3N4IOiPBnUzTA:QLqi9r9L+xpL8SN4SPxUQ","tlshash":"62e2e1db410202e3fe79c6f64c857a018b3626750f872eb1b6b5a8f1310525ea606f3e","first_seen":"2025-09-24T00:46:33.948325Z","last_seen":"2026-09-14T18:48:53.638676Z","times_seen":24,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rubik:wght@600;700\u0026family=Karla:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.230Z","timestamp":1789411701230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Rubik:wght@600;700\u0026family=Karla:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 18:48:21 GMT\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6111,"size_decoded":1562,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"73b3f75c461791397101ae428bd95941","sha1":"282b18c58a84feb56ebfd5c784c8cec1da7978f2","sha256":"1d8deaa4b9a88d59d502c1bbf920475650d64a4e7eec95a60523b753b5b555ff","sha512":"cf8df722d7c36457ae9c87cbed1d975782f5f4facfb9815edeecc8c6c703aefaec58adb9d5c79eb72eb3bd810da9ed4ed8fa4b0332625835372226c378a98527","ssdeep":"96:yOEa2GJc+uuOEaDgNUQOxMaKA0Zl8DCK9cHoQOxMaGHwQOxMa/FZSQOxMaxQOxMH:FjaDLhClGs+ALAkWhClls9nkALp","tlshash":"a6c1dce1481f5044ff472cc263ce6e37ee0e62553490c5699bfd1a99acabc22336578e","first_seen":"2026-03-09T15:32:07.327745Z","last_seen":"2026-09-14T19:17:19.668323Z","times_seen":49,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kocfinanssecimtestiozelsecimprogrami.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"kocfinanssecimtestiozelsecimprogrami.click","domain":"kocfinanssecimtestiozelsecimprogrami.click","tld":"click"},"ip":{"addr":"104.21.5.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kocfinanssecimtestiozelsecimprogrami.click/","date":"2026-09-14T18:48:21.232Z","timestamp":1789411701232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kocfinanssecimtestiozelsecimprogrami.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 08:08:27 GMT","end":"Wed, 18 Nov 2026 09:08:24 GMT"},"fingerprint":{"sha1":"F5:B4:44:39:28:48:0C:6B:EB:FC:CA:FC:B3:5F:9F:1E:25:6B:BA:53","sha256":"F9:7A:3A:DC:05:01:C6:95:E9:18:0B:BC:87:73:A0:EC:B8:12:78:52:33:B0:66:AD:B7:C8:60:9B:4F:57:95:B5"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: kocfinanssecimtestiozelsecimprogrami.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kocfinanssecimtestiozelsecimprogrami.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fkocfinanssecimtestiozelsecimprogrami.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:48:21 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWFTvuboOmbhIngLuTMQmcPncmbXvfL9%2Fbvuj4juYCL0Smi8fSkyiPQIZD61bOizAGdDkbGgfTeG7y8%2FZe3QIjczbX%2BBWYqRaRs37syET0kjK8K8a8E%2FkdO39hbaPRXu%2BTWrqXDzIpfUcUOrVqmlRP%2By0ytX658XyDTgsYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Mon, 14 Sep 2026 18:48:21 GMT\r\nserver: cloudflare\r\ncf-ray: a3b190bcdafec4bf-HAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4603,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-14T23:37:41.050281Z","times_seen":128100,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kocfinanssecimtestiozelsecimprogrami.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}