{"report_id":"95e00103-0fc1-4462-90e0-84d5de3d364a","version":0,"status":"done","tags":[],"date":"2026-09-20T21:45:57Z","url":{"schema":"http","addr":"xenwor.com/","fqdn":"xenwor.com","domain":"xenwor.com","tld":"com"},"ip":{"addr":"77.245.159.230","port":0,"asn":42868,"as":"Niobe Bilisim Ltd. Sti.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"http","addr":"xenwor.com/","fqdn":"xenwor.com","domain":"xenwor.com","tld":"com"},"title":"Hosting.com.tr","dom":{"size":5227,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"83bd1694ce221630b614c75d33ef5779","sha1":"c65a4dd4a5095f073e4b5df57d52776605fd0869","sha256":"17683c57863fcdf1c45015992eb50fabdfb91b96aed0de0602ee666806874d62","sha512":"6302d31cd5e7a07fcfa2977a5404c5181b3b14ea669c4e01deff4a35e759cdfd47ae1bf2effc1b3b1e1dd42395ced587327b591d0a836866dec4e8794ec3ba0e","ssdeep":"48:cmb83GyXSnn96qTIB570fmecSp8bNSigxSxxSDNS3LSfmL2Ou/akB9OkG4+A:LzyeQ70FczBTgxux8NYLe2jyayDHr","tlshash":"d7b12335c2a8953b510241c5ba30da4dd59baa47ce134dc6f7ff03d9bb81da6c85708d","dom_hash":"domhashba1aa53a2f68f0b537a815d83f4a48f7","first_seen":"2026-09-20T21:45:58.922581Z","last_seen":"2026-09-20T21:45:58.922581Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xenwor.com/","fqdn":"xenwor.com","domain":"xenwor.com","tld":"com"},"ip":{"addr":"77.245.159.230","port":0,"asn":42868,"as":"Niobe Bilisim Ltd. Sti.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T21:45:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.hosting.com.tr","ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-07-07","domain_rank":1281789,"first_seen":"2012-11-04T23:14:49Z","last_seen":"2026-09-19T11:16:07.04712Z","alert_count":0,"request_count":9,"received_data":581788,"sent_data":5044,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"xenwor.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-10-04","domain_rank":0,"first_seen":"2026-09-20T21:38:44.304826Z","last_seen":"2026-09-20T21:38:44.304826Z","alert_count":8,"request_count":2,"received_data":5599,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-09-14T08:46:23.375467Z","alert_count":0,"request_count":2,"received_data":92969,"sent_data":1121,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":18266,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/img/network/64x64/64-66.png","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.298Z","timestamp":1789940729298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/img/network/64x64/64-66.png HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556926\r\nexpires: Tue, 21 Sep 2027 03:34:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Sep 2019 20:39:29 GMT\r\netag: \"4e2-5d8e7381-111ee8f0f0379a28;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kiCF52MtAXa7rkep5nMbYtYznBxpn3ZOS9uibA4niUpkHX2%2F64kTMfQ%2BpysDYgRXryM6dbmbejGRBD%2F5oqp%2FFhcwxRyYBXuwfQKstoFFD9Hr3XV7Uwhkjrtjz8F9PQYUZAJQA%3D%3D\"}]}\r\ncf-ray: a3e404762b7f32fa-OSL\r\ncontent-length: 1250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1250,"size_decoded":2361,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"828fd9b1ba07e58d209d239a2c4ff5de","sha1":"4d1289480b796a32c5850c495a6838db09767f4f","sha256":"a6ceda9154fe100c9c663ba872816a09bad28644536d3f56ad3dfdcec786b5b6","sha512":"b105e575fd5c9e10e517d026b1f91087f2018958a3e71b7bfb04c23de96af32c242356f2a7c4fb7793e3f293756fef480c38f41ba48097bb6473d239e0d1a61a","ssdeep":"","tlshash":"7321b7e949eec23ac1d711c7bfe626908eb70e344311984c118f6d91641b64497754c7","first_seen":"2026-09-06T19:37:50.155631Z","last_seen":"2026-09-20T21:45:58.925956Z","times_seen":3,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/img/index_bg5.jpg","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.452Z","timestamp":1789940729452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/img/index_bg5.jpg HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556926\r\nexpires: Sun, 19 Sep 2027 17:04:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Sep 2019 20:32:19 GMT\r\netag: \"140e3-5d8e71d3-f0a695849b8f9380;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwgYUM%2FwxZJINf2SoxBvtWDGDOpzL0RFEsRF7f7ZDZr25Mlgtv3%2FMw0OYV7Ud10jgEr2Uq7MPP3TJGwMhbrH0xpIZY%2BfDghry%2B9m12DKYoASGUB2oUuF7VK%2Fku9vtuLB5MBY9A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-polished: webp_bigger\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i\r\nage: 124191\r\ncf-cache-status: HIT\r\ncf-ray: a3e404771bbe32fa-OSL\r\ncontent-length: 77425\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77425,"size_decoded":78604,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Sehenswerk - Fotolia], progressive, precision 8, 1280x469, components 3","md5":"faf89c8bb5de6e93abf2dadcffa82496","sha1":"d964bfae3373a9ba0c5162f15d5253061a2c2fd2","sha256":"b11a10526e21dc45b34d0490266e76c0e5bbf338c9d77212c6363a03951b2f15","sha512":"8671a9762bc5176dd22081cb5bc7528fcb96891bba3473982a2233e480a1be047cf50eb991028db38b8d1f9bacfc5c441dbb3f5fb7e02e4d8903e44539fb786e","ssdeep":"1536:SBkho0y/d5nwsyBYKiSuLv9SvTJNSbvUDVRkL85wDjk:Sgo0y/dWsyjiVLv9nMDVR68h","tlshash":"38731265ee965f47c8e8942744b397d10ad33ae4ec34b6336e56014821c1a8bd9ce8ac","first_seen":"2026-09-20T21:45:58.92796Z","last_seen":"2026-09-20T21:45:58.92796Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/img/favicon.ico","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.677Z","timestamp":1789940729677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/img/favicon.ico HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 20 Sep 2026 21:45:34 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nlast-modified: Fri, 27 Sep 2019 20:31:37 GMT\r\netag: \"3aee-5d8e71a9-7837a60ab5caba28;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BblWMTpCuH%2Bc5nzcPIeOjwOQQp1ghJSk2yQEwhIJMPmeJzyyS0PqMkfdy6xOVOFned88VHha%2FkCTnvRdnaDQKe9KuyW%2FoiBPYA9frLNY%2FWMGmKP%2BnKgOImHJvQBL%2Fi8pYtfluQ%3D%3D\"}]}\r\ncf-ray: a3e404787c4132fa-OSL\r\ncontent-length: 4256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15086,"size_decoded":5419,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a4a163afb6980e36fdab7ca4d6129b08","sha1":"c85d16004ac53defb8c3d7e20ddf89038ea5291c","sha256":"d4cc5e98a53b1e380647fc975f14d5e5dea7168981c0c7437aaf7523aaf8be4e","sha512":"7bae9a0893527545e4fedb53e5dd36ed991b4d925390bb39da92ebc25a0d85336f908130290c2684501c8da00bb74f095cb69c6e04ee0022ac3b2a1c09c0020f","ssdeep":"96:jcnXpRe+DTlOgAy5a7AKZPpG+mHROC56HVHApt:j3GEdR7A40T4C561K","tlshash":"94620a609592c283c05d9577e852aff9a52fef44c892212713e4be7d3afbf892434670","first_seen":"2026-01-21T11:51:26.869203Z","last_seen":"2026-09-20T21:45:58.929684Z","times_seen":4,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xenwor.com/","fqdn":"xenwor.com","domain":"xenwor.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T21:45:28.445Z","timestamp":1789940728445,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: xenwor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T00:48:27.090956Z","times_seen":18576228,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"xenwor.com/","fqdn":"xenwor.com","domain":"xenwor.com","tld":"com"},"ip":{"addr":"77.245.159.230","port":80,"asn":42868,"as":"Niobe Telekomunikasyon Bilisim Teknolojileri Yazilim Danismanlik Sanayi ve Ticaret Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T21:45:28.743Z","timestamp":1789940728743,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: xenwor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: text/html\r\nLast-Modified: Mon, 31 Aug 2026 20:09:15 GMT\r\nEtag: \"1484-6a95df6b-f2aea2fa8df5e2b9;gz\"\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding,User-Agent\r\nContent-Length: 1449\r\nDate: Sun, 20 Sep 2026 21:45:28 GMT\r\nServer: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5252,"size_decoded":1796,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"506f0cf4f64166666aa6e28572324531","sha1":"718607f0f8a8a68d36da2c1be94368660d004881","sha256":"cd7c4b8f4c3ff0df49a090c5dd00be6a307f7e11e73821c9b9e0e2d1764c2cb3","sha512":"61823acb7c798e105cb5b154ce8ac6b4d813703ca5b3787d873280fc0f10ef2ffecee18b4c37d0db3a06088e581a54449b410af6b64e2496faeefb05fcf313b9","ssdeep":"48:Kc83GyXSnn96qTIB570ffecSp8CNSi9xSxgSD6S32SfnL2Ou/akB9OkG4+A:hzyeQ70ucz8T9xug86Y2eLjyayDHv","tlshash":"7bb1223582a8953b510241c5ba30da4ed59baa47ce134dc6f7ff43dabb81d96c8570cc","first_seen":"2026-09-20T21:45:58.931586Z","last_seen":"2026-09-20T21:45:58.931586Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":65,"connect":72,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"xenwor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/css/all.css","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.284Z","timestamp":1789940729284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/css/all.css HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556926\r\nexpires: Sun, 19 Sep 2027 17:04:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Dec 2024 12:51:30 GMT\r\netag: \"72f34-676416d2-75fc8397a7d56a7e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 124191\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xh0xEMQEG%2FaZEsGJhTBiFzqFaRDm4xyL9R0e6E2GlhHQNxMUFEd88A6NjNAYiFclaCluXISLovAMyj7rOVf8GzPzXagNhv6JVrHKgNAY176o9p7EvqS%2BCexNjp1wEZDCrDQWSw%3D%3D\"}]}\r\ncf-ray: a3e404762b8032fa-OSL\r\ncontent-length: 64258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":470836,"size_decoded":65404,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73b41a4bf604da560ebc5baa47e52dcb","sha1":"102b559bddb4b16b3d1c3937b22c8e8896e43515","sha256":"5e1475d895e3379aa35d76c3c230131ddd6201ba2cfd726e386e443dbf9cabaa","sha512":"54f6c580c2f7af09c43af7ebe37aa1a6cb0d76bb2223f07566487e6fbb466b89335d5bf5fa9d7b41c647f6f695ef7e30e5b261c0e44842256c5b45745939a0a6","ssdeep":"6144:AEdxo4kGHgfgllmFgIKcu1grFC9kZY+ybButLiVbd/lwyilXCOohXMSljrITsXuR:AEM4RgfJ","tlshash":"dca4d711e170345d716bc22df5c1baed792d6152e6238bbaf91b72a5c78a1ca1333b0c","first_seen":"2026-09-06T19:37:50.162849Z","last_seen":"2026-09-20T21:45:58.932969Z","times_seen":3,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":6,"connect":11,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/img/network/64x64/64-61.png","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.292Z","timestamp":1789940729292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/img/network/64x64/64-61.png HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556926\r\nexpires: Tue, 21 Sep 2027 03:34:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Sep 2019 20:39:29 GMT\r\netag: \"6f2-5d8e7381-94a2e7ff5de347a6;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dp1MVs9KRBwX1UCMIHEYGBQy9wiTOp4G%2FAOq43%2FmEO24ng3VGOBtF0z6a6XPMsQSMLWlXgoq80Uiv%2FZ%2FrlJaq9m4QTEd7GLDMIaZbHTfKQdQa5ydtg%2BKGMdHPH3ojXsP3oR46w%3D%3D\"}]}\r\ncf-ray: a3e404762b8332fa-OSL\r\ncontent-length: 1778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1778,"size_decoded":2891,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2fb264a421723594a90476b985fe429f","sha1":"12aa63c107b6f0f9ac185a9282419337a155d2cc","sha256":"ad607163c25ba4573c32716ad283e741948b823e12ff46885aadafc89c2bf63e","sha512":"7109c1aa73f35e52f2006b9c5e5853666a0f9d8c1090fe997fa26ccf9dd732463304ee9dbd69801bd697a3d86ebf34c4d7d140a5d68b55905768b0b4933f88a4","ssdeep":"","tlshash":"5c31c9ce62e3113d5ec128b4231b5b5ea02ac58acdc65d66edde904409ad98418bdb1e","first_seen":"2026-09-19T11:16:06.936705Z","last_seen":"2026-09-20T21:45:58.934639Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/img/network/64x64/64-43.png","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.294Z","timestamp":1789940729294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/img/network/64x64/64-43.png HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556926\r\nexpires: Tue, 21 Sep 2027 03:34:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Sep 2019 20:39:27 GMT\r\netag: \"491-5d8e737f-d3dd0b8bf66de1d3;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GC5q%2FarnDEILzZnTDo9WVG5rd4VMkmM21aTXJzd5jfDcoY%2FMc6OqaKXoEQWHF8dZh3DsEUu%2F5gVn545SDXhyxEElHM9FvelD5N2XH6sP0LwLQbwOepRQOaFyJBBvDaInuhI6GQ%3D%3D\"}]}\r\ncf-ray: a3e404762b8232fa-OSL\r\ncontent-length: 1169\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1169,"size_decoded":2278,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"728a11a6dabb214cbf078da219f3c0aa","sha1":"0a2038bf4250eeac52fc96c5819da74f0273f831","sha256":"278b676ced6b01489e35a3c141e9a7e963e21aa781ae026ce39381d59131e43e","sha512":"ee35ac089c426ed51b562500efbad02d01c68a718405fb06b9ce8ec4778e2d76448cd72570f4d41a46125422c6998c3572963f59b1622f0ce44a294421d35670","ssdeep":"","tlshash":"d3212df8764cb0d61a7b7070218a00224cdb5484b6413fd0351bd1d7abfc1681e396b3","first_seen":"2026-09-19T11:16:06.938017Z","last_seen":"2026-09-20T21:45:58.93574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/img/network/64x64/64-70.png","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.295Z","timestamp":1789940729295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/img/network/64x64/64-70.png HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556926\r\nexpires: Tue, 21 Sep 2027 03:34:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Sep 2019 20:39:29 GMT\r\netag: \"471-5d8e7381-d8f05d5f18ff655f;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZDf%2BBwPNiCeshgOCcGu6ZE7ymuQFvi9DW96wgMqcc5b4ZeyzgpRsOqyEx9T89LZY%2FqZ6LgOu5nhhwCiKkAS%2BoVfnUggr%2Fo7PjAGm2Vix%2BMefx2z9N02IExaBDzwhec5vCGODg%3D%3D\"}]}\r\ncf-ray: a3e404762b8132fa-OSL\r\ncontent-length: 1137\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1137,"size_decoded":2250,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"7f35f5c2e6e8380cc12af9157730b293","sha1":"2c737c42d7304463ed98ee47f6cf2645b712b562","sha256":"6c88e70c8070049348433bc00626113266e0613634a76b2278abb16aee348a57","sha512":"ade8291c9a12b9a8e4b088998c85517ece3f9e19c3abd57de8165673263cdbf2405835cb5d5f2709c23d2a4c17e53a4b95a1473804fa0d9b7ebcf33e0d5fc87e","ssdeep":"","tlshash":"b721f9ff21a80db8de26537e18af2996c022713c0c0682a138c864551603d3471cc7e7","first_seen":"2026-09-19T11:16:06.930209Z","last_seen":"2026-09-20T21:45:58.936864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/img/network/64x64/64-08.png","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.296Z","timestamp":1789940729296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/img/network/64x64/64-08.png HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556926\r\nexpires: Tue, 21 Sep 2027 03:34:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Sep 2019 20:39:25 GMT\r\netag: \"4f7-5d8e737d-48cd48aab9afe0ca;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIFZ%2BfopbAl0J%2BDt93ATHua7WORK949ZrA9sPcDn4rTzMLDH2lwXme2uOfn0%2B31yaqfNewHeDFeD%2BQm%2F8Uvq7NLo%2BOtraHxrhLX5uDpelVBkUO0BHM1is3WyF56J7q1tN2QSiw%3D%3D\"}]}\r\ncf-ray: a3e404762b8432fa-OSL\r\ncontent-length: 1271\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1271,"size_decoded":2386,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e79cc442e4e8495cd3cb3df2b3331868","sha1":"3845b16606015d9989dbaae0f96d80faf3fe4fb0","sha256":"89b26bc0a143409c7a141feb4125539cf6aca9ff788094c0973f87db4f0b07c0","sha512":"592b4b6b12960f629623fb4598e007a0c5293d5b3118e190b598dd24cb0e71dcbb44a61c7e19e434dce0907f36b20e90ec19001c6b0caa8fc8695b55b7ecef21","ssdeep":"","tlshash":"a521bacc5aca247db13905f235510014a3fb285593a577945480e2ea3f2965c85796f5","first_seen":"2026-09-19T11:16:06.940174Z","last_seen":"2026-09-20T21:45:58.938499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.468Z","timestamp":1789940729468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://xenwor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: W/\"4b5a84aaf1c9485e060c503a0ff8cadb\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 05/26/2025 07:57:59\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1054\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 43d781f061fba1b2d4d42bcf13ee9396\r\ncdn-cache: HIT\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3e404773ded0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64464,"size_decoded":65338,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64464, version 4.262","md5":"4b5a84aaf1c9485e060c503a0ff8cadb","sha1":"574ea2698c03ae9477db2ea3baf460ee32f1a7ea","sha256":"3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019","sha512":"05196036c41398616c077925fc4bf252e81f11b6ebef8745047d75cb2c8b80441b8c3593f4d5b2617089e9f3d8d957f9edcdf8e43993661a277be8f4b6a32111","ssdeep":"1536:wOhGmmMET1VwoQNDerkOtxhncPvaAAGzw9jD8RlhANsK1q:JhkhVINDerkO+aAAGA/aANX1q","tlshash":"a753f162a0233101d19918bb7d39ffe22b01c1cee34659c7dda62c5338e5d5472abe2e","first_seen":"2023-04-05T03:42:19Z","last_seen":"2026-09-21T00:28:42.143224Z","times_seen":27077,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":9,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:700italic,400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.281Z","timestamp":1789940729281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Open+Sans:700italic,400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 21:45:29 GMT\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17582,"size_decoded":2524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"cfb8eb90cff3e9e1d18d6d002d40e7bc","sha1":"d5adb58abfb7e182d2903f4fef010befdccffa23","sha256":"bde8da9e2deaa96957305a8f69636e7b85c6d199849e7dc897d3941881d7faac","sha512":"9bf7e4b8738022ad992ba98e3d8b3f65b392a065f7b13c53e4e7c683c61e4bab31a3aca1da77b4e0d5d3114e052a562fe49bb08f40ca40f84bb260507837f05c","ssdeep":"192:+h0TOh7hch/5hHh+qvh7bqGIwV49h8hPohhCAAN21/rqbnbqGIwV4Razq4CZZE2Q:+0OZOTp/vdqY49iWijXqY4nU8qY4Z","tlshash":"d8823ca10417145062431de233de3e30ee0f92657084c0766bfe9b9beedada963b435d","first_seen":"2025-09-23T10:01:32.288565Z","last_seen":"2026-09-20T21:45:58.940438Z","times_seen":22,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":33,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.283Z","timestamp":1789940729283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: US\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"0831cba6a670e405168b84aa20798347\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 02/22/2025 16:50:44\r\ncdn-proxyver: 1.19\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f8f394e64ada457d0c61a7ca85be380b\r\ncdn-cache: HIT\r\nage: 3284980\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3e404761f334e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26711,"size_decoded":6937,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26548)","md5":"0831cba6a670e405168b84aa20798347","sha1":"05ea25bc9b3ac48993e1fee322d3bc94b49a6e22","sha256":"936ffccdc35bc55221e669d0e76034af76ba8c080c1b1149144dbbd3b5311829","sha512":"655f4a6b01b62de824c29de7025c4b21516e7536ae5ae0690b5d2e11a7cc1d82f449aaebcf903b1bbf645e1e7ee7ec28c50e47339e7d5d7d94663309dfa5a996","ssdeep":"384:/i5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:klr+Klk3YlKfwYUf8l8yQ/7","tlshash":"5ec240e8e54c01d66731c48bff85b36862b6f73dd5804da9f01f690c29d22a522c5fba","first_seen":"2023-04-05T03:42:18Z","last_seen":"2026-09-21T00:27:37.858917Z","times_seen":23022,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hosting.com.tr/templates/hosting/img/network/64x64/64-73.png","fqdn":"www.hosting.com.tr","domain":"hosting.com.tr","tld":"com.tr"},"ip":{"addr":"172.67.68.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://xenwor.com/","date":"2026-09-20T21:45:29.297Z","timestamp":1789940729297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hosting.com.tr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 16:51:34 GMT","end":"Fri, 20 Nov 2026 17:51:20 GMT"},"fingerprint":{"sha1":"A0:45:D6:81:32:CE:86:92:A7:AA:17:2F:01:51:19:22:AF:80:98:08","sha256":"98:AB:3C:86:87:B1:E6:F1:A5:04:A4:FB:77:0B:AD:C9:8B:45:C5:6C:19:F9:FB:5F:B8:7F:5B:B2:11:60:70:A0"}}},"request":{"raw":"GET /templates/hosting/img/network/64x64/64-73.png HTTP/1.1\r\nHost: www.hosting.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://xenwor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31556926\r\nexpires: Tue, 21 Sep 2027 03:34:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 27 Sep 2019 20:39:29 GMT\r\netag: \"692-5d8e7381-632efabe6d33d71d;;;\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 20 Sep 2026 21:45:29 GMT\r\nserver: cloudflare\r\ncf-device-type: desktop\r\naccess-control-allow-origin: *\r\nedit: Set-Cookie ^(.*)$ \"$1; SameSite=None\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFXLpEnMFj1s5YxKTU1P4JHxsMmEZUQPttMZdEgxxly3BqmBj3rSxHwd1DwkAAAp7ZIGnTf8S2uCBFwq9SOJLTCJfe%2FGUPLh2GBO47mUvligMGZz92KQY0lpwListm1zUPZoXA%3D%3D\"}]}\r\ncf-ray: a3e404762b7e32fa-OSL\r\ncontent-length: 1682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1682,"size_decoded":2787,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a43bfc242e9360fb4f49acb8a17c9918","sha1":"78bd7b513bbca8429eae15b6e082eb12df84beae","sha256":"63b8829edb124935f2c38fca9f531e58d359d29959b455d4cc5dcf4ecfb104e2","sha512":"6d4df6746744eafec1f38a96fcb6d1f1e7786b459adc91ebafd80148d3d81ded8ebf5f6593520b3fc9eae7fbb5be900022342e79f9ca2143a7e09d8a2f496bd5","ssdeep":"","tlshash":"6d31f6387790da216b1e2de1c0048120cb57b53e68234302d5c4b9852f74e04a9ffd1a","first_seen":"2026-09-19T11:16:06.942922Z","last_seen":"2026-09-20T21:45:58.942495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}