{"report_id":"999302b4-c0d1-449c-b0d4-d31da645cdd4","version":0,"status":"done","tags":[],"date":"2026-09-07T20:23:50Z","url":{"schema":"http","addr":"astekinsaat.com/","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":0,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"astekinsaat.com/","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"title":"Astek Insaat - International Construction Company","dom":{"size":6007,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (389)","md5":"affd233956491b7b6101f8b7b0e53937","sha1":"d2df24a7e7c0945409bd22bd1b3e31f8d9544f7f","sha256":"d5c8fc36f2a3a371723a0e0344300d0091e1b648eb8adcd018dc02630f0e837b","sha512":"9f709b30c5bfcbbdeef1b6525e1d291692634078386981664441578f2381acc9ea3c6717e88c84d30bb4ecc89c36b41c66a8060319ff21bf2b9aefb498e2d0dd","ssdeep":"96:nmWmiNTva9FEuPpsWFJZF4tmf+tTjaVsLD8uNMPdlCrI7ijZVfV:mhAaUEp5fuPaVK4GMPTOjZVV","tlshash":"88c1c61205686d8e8a006098db987e4a69fa147fb79a9850744c753f3bd7251cf3f33d","dom_hash":"domhash26f09c194d54fad2900041f8fca26f43","first_seen":"2026-06-27T10:56:30.811184Z","last_seen":"2026-09-07T20:23:51.528717Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"astekinsaat.com/","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":0,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T20:23:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"astekinsaat.com","ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"domain_registered":"2009-09-14","domain_rank":0,"first_seen":"2018-01-20T22:48:38Z","last_seen":"2026-09-07T20:19:42.696842Z","alert_count":50,"request_count":10,"received_data":539357,"sent_data":4993,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Site Meter","description":"","website":"https://www.sitemeter.com","common_platform_enumeration":"","icon":"Site Meter.png","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"astekinsaat.com/images/ana2.jpg","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:19.989Z","timestamp":1788812599989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /images/ana2.jpg HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Wed, 16 Sep 2009 22:51:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25788\r\ncontent-type: image/jpeg\r\ndate: Mon, 07 Sep 2026 20:23:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25788,"size_decoded":26057,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 505x155, components 3","md5":"b676fbeb8d663e62f560fd79450c5ffb","sha1":"8fa3a10cb05f31850d73b7d022f67ddeba66ca2c","sha256":"4c8d75d1e72e33b574da8195c041b51c7c49d0d3ce4894797756cd53b752f11e","sha512":"63737c1dde7a1496ecaddc6313a7a2510a11950408066ab85eabca2e8b841b31de453306fda60117c54fc062b326a8260cd1a051687cf1b346d5832467a981ab","ssdeep":"768:zc/9l0tU//qL/TbgwfarJ/RkaSG978SOqjCMehAH:iP/iLrbgwfi/RkaSG9BjCjAH","tlshash":"93c2f2bb92567b79e4a04df670fb5c159376a011cbec2dccb9b075c6d400258450d67f","first_seen":"2023-05-12T21:16:30Z","last_seen":"2026-09-07T20:23:51.530629Z","times_seen":8,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/images/back.jpg","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:20.042Z","timestamp":1788812600042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /images/back.jpg HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Wed, 16 Sep 2009 22:51:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73047\r\ncontent-type: image/jpeg\r\ndate: Mon, 07 Sep 2026 20:23:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73047,"size_decoded":73316,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1600x2244, components 3","md5":"95214b489693e428067554e6318cd11a","sha1":"ce1d7ce8143c840fa5d2185f989e80b884651449","sha256":"f4452059c1b47a8e239b7ee35d3cd7346e5e5942834cac67276cfe84fdef5c68","sha512":"053a76020f685f3841f529bd221f4f8e9ceb5730c73526b467b50e864f74148363dabccc22a303067c1bed6fd00c7581892dba04eab261c0a9cb45b136e28655","ssdeep":"768:LzDxwqVH2z1tkbeI6H6nn7aYKCpnw2f3g0gd1aNmxzwUjOrR99n77wJLFeonGmgC:Lz9PVWzvXhH67lQYu0U8N74nGmctJir","tlshash":"d7634c379b05aa92c4dc23748ae34b05bb7384b453a14117dab84d395de77087caddf2","first_seen":"2023-05-12T21:16:30Z","last_seen":"2026-09-07T20:23:51.53167Z","times_seen":8,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/favicon.ico","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:20.309Z","timestamp":1788812600309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-length: 236\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 07 Sep 2026 20:23:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":236,"size_decoded":454,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"54ddfcfcbac52ccc7451161d40934ad7","sha1":"3f9915360e96bd0c5c756209a62d99b0246a634d","sha256":"9448f8a1159c9b14e3e1b9d8eab1a6ddf88d26e1f888a34cef430c756e4e6e1e","sha512":"b5b31c06e9e8cfc08e09e90bc5ba77c970c5be644c109f14b4b430384d4cecefae4368e051ed96323cfd3fe7a0e9f4832025c2efd213aa64bf65c55625bd72e6","ssdeep":"","tlshash":"61d0a79e90939386415176907ec123d2654953ab78b143e96ec1944690086bdc0d919d","first_seen":"2025-12-07T09:00:18.523222Z","last_seen":"2026-09-09T13:22:59.459404Z","times_seen":7403,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/tabs/mainstyle.css","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:19.971Z","timestamp":1788812599971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /tabs/mainstyle.css HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-length: 236\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 07 Sep 2026 20:23:19 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":236,"size_decoded":454,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"54ddfcfcbac52ccc7451161d40934ad7","sha1":"3f9915360e96bd0c5c756209a62d99b0246a634d","sha256":"9448f8a1159c9b14e3e1b9d8eab1a6ddf88d26e1f888a34cef430c756e4e6e1e","sha512":"b5b31c06e9e8cfc08e09e90bc5ba77c970c5be644c109f14b4b430384d4cecefae4368e051ed96323cfd3fe7a0e9f4832025c2efd213aa64bf65c55625bd72e6","ssdeep":"","tlshash":"61d0a79e90939386415176907ec123d2654953ab78b143e96ec1944690086bdc0d919d","first_seen":"2025-12-07T09:00:18.523222Z","last_seen":"2026-09-09T13:22:59.459404Z","times_seen":7403,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/agora.css","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:19.973Z","timestamp":1788812599973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /agora.css HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Wed, 16 Sep 2009 22:51:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 846\r\ncontent-type: text/css\r\ndate: Mon, 07 Sep 2026 20:23:19 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2790,"size_decoded":1158,"mime_type":"text/css","magic":"ASCII text","md5":"e7ebb786d9ab89f3cb71f7fa002a166e","sha1":"88dbf7dd04bd865a36f8f2416dbb7b67fe829e9d","sha256":"f7e1df1fa3c19c16925ddd945525c0116ce8547d0b49aa5f8ec96870fdc7c2f6","sha512":"55653123c62014af867290dece0cb8b2cdcbe0fbce570a10211b58769faeb929675ccad6dbce4e6a32770b36e3c571a8661b11c51a80c93282447d79971ce7ba","ssdeep":"","tlshash":"6d51adf3ad0e10929127c277641af9a53278a2d1c87b8f35bff4f614dc285253643e09","first_seen":"2023-05-12T21:16:30Z","last_seen":"2026-09-07T20:23:51.53342Z","times_seen":8,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/images/logoust.jpg","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:19.983Z","timestamp":1788812599983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /images/logoust.jpg HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Wed, 16 Sep 2009 22:52:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56068\r\ncontent-type: image/jpeg\r\ndate: Mon, 07 Sep 2026 20:23:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56068,"size_decoded":56337,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 900x136, components 3","md5":"30694e9d91beba5502f1188ee893d27e","sha1":"105293811403d5a7974b08fb6d6d54ea9decd09a","sha256":"351745d32972565c739425e893954838a0e371d33a031452ecd17ec0d4e10d3e","sha512":"f488cc390f46696aa5a5ec1710aca40008a91186e0bcd8e590913d2261c27bee2932416e725f796addc0e7c1d87b9dd0d621b6317460033b1cb87bab6c4e79d8","ssdeep":"1536:sHex9hHp8se1H6PC56zxMuMWmVznVVyxEDI8PBqF:fx9hJtOMEk/MWmxVVJnS","tlshash":"7d43f1044c4cdebc6fc374aa3367e213d58610ed603699def76a506bacf596ee06e050","first_seen":"2023-05-12T21:16:30Z","last_seen":"2026-09-07T20:23:51.534405Z","times_seen":8,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/yazib.png","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:20.044Z","timestamp":1788812600044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /yazib.png HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/agora.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Wed, 16 Sep 2009 22:51:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 961\r\ncontent-type: image/png\r\ndate: Mon, 07 Sep 2026 20:23:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":961,"size_decoded":1227,"mime_type":"image/png","magic":"PNG image data, 10 x 2, 8-bit gray+alpha, non-interlaced","md5":"5c54b4e33eab070e937202019e308b7e","sha1":"b74b7a508de648260da18356922f8c7ffc3c1b79","sha256":"7f27dc8f1d6326ac6c1618dc51a4a5bd226e1b365b1de884346f4708826a89ad","sha512":"4853d1afa9fa8ea252b804774c7bbffa5a553c87b8255a4868b5e3188f2a575ee6e3eb21394e48248509c02fadf35bb193275975562ee783e4c75ee1dfb04aaf","ssdeep":"","tlshash":"2211c859844088b85c4dc3e3916312303fe935646f3f70c6083d97a49c0d695dd5a4bb","first_seen":"2023-05-12T21:16:30Z","last_seen":"2026-09-07T20:23:51.535117Z","times_seen":8,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T20:23:19.351Z","timestamp":1788812599351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Thu, 17 Sep 2009 07:58:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2344\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 07 Sep 2026 20:23:19 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Site Meter","description":"","website":"https://www.sitemeter.com","common_platform_enumeration":"","icon":"Site Meter.png","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5895,"size_decoded":2673,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (389)","md5":"c40fd83e6e45cbe7718309a5cf127057","sha1":"8646bb42577e635cfa1fc4de1bbee7ae6828fe6a","sha256":"0fc4cfd0ebc1d18816569f980e16b284ce6902b69141be1465d19c9ca48533c9","sha512":"b57a1ec959461f6cd3d4c49043c9c7473e8e573700a2b7dc3a7b4eb07019610784c78e5ab0adfc5a84f096bcdd557650418d76314fd3323ff27d160426f3d6c8","ssdeep":"96:Fm/gxmZH/Sua9FEuXEpsWFJZFH+3mf+tTjaVMLD8uNMPdlCr9vjZPfF:c/gg9aU3plfuPaVq4GMPSvjZHF","tlshash":"18c1b42206786d8e45006059eb583e4ab9fa14bf77aa9d60744c693f3bd7250cb3f31d","first_seen":"2025-04-19T10:35:48.840332Z","last_seen":"2026-09-07T20:23:51.535733Z","times_seen":5,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":122,"connect":52,"send":0,"wait":63,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/images/solmenu2.png","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:19.985Z","timestamp":1788812599985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /images/solmenu2.png HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Wed, 16 Sep 2009 22:54:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 346432\r\ncontent-type: image/png\r\ndate: Mon, 07 Sep 2026 20:23:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":346432,"size_decoded":346701,"mime_type":"image/png","magic":"PNG image data, 380 x 796, 8-bit/color RGBA, non-interlaced","md5":"8285b82e7a6e1552c2553f6af147837b","sha1":"a5f1cbc3bd2150a4bb445d7d915977e093c7205c","sha256":"fc337aaf64a122840ba60d98ca6a53e7080de26e4c8add3c4ddd60ad41d40ef2","sha512":"b8376f20e25fbd5adc8882ca6568696a6a616f18e48157e36601253a18caab971e7e0fe90dcff0d1e3ceee945082e99e9f14cb53ae6ac871fa7a17d57f379832","ssdeep":"6144:0TvcSBVOP6zTmLTMgCTbJSIEanxs9D4PV/zBXo5aHmIfiYwaVGcdH:evcoEyikgCTb8IEaxs9yVdF1fzHH","tlshash":"047423a4df0a4e02f14bac81d2a60debc5f867505f09d0259a5d1c5c18eae79af2fc0c","first_seen":"2023-05-12T21:16:30Z","last_seen":"2026-09-07T20:23:51.536553Z","times_seen":8,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":206,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astekinsaat.com/images/ana1.jpg","fqdn":"astekinsaat.com","domain":"astekinsaat.com","tld":"com"},"ip":{"addr":"217.174.152.14","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astekinsaat.com/","date":"2026-09-07T20:23:19.987Z","timestamp":1788812599987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astekinsaat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:34:25 GMT","end":"Thu, 26 Nov 2026 20:34:24 GMT"},"fingerprint":{"sha1":"E1:E4:DB:24:69:CA:54:AA:26:7B:0B:B0:BE:F2:7A:BB:34:06:76:65","sha256":"BC:37:1C:B9:B6:0D:63:73:19:E6:6F:47:AB:D4:D6:83:3C:AD:40:46:84:DB:86:39:D0:9C:6D:F8:9A:E8:83:D3"}}},"request":{"raw":"GET /images/ana1.jpg HTTP/1.1\r\nHost: astekinsaat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://astekinsaat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Wed, 16 Sep 2009 22:51:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25216\r\ncontent-type: image/jpeg\r\ndate: Mon, 07 Sep 2026 20:23:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25216,"size_decoded":25485,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 505x123, components 3","md5":"a449bafc9b15959a8a769415ed93d9f7","sha1":"90bdd31b24a6c05abbf885dad5baabb394bededd","sha256":"c363dd39c43be43388e1b74c7148f7e6dffebf33fb4f9070751efe897175f691","sha512":"c724bef12a60d73688fe9be71e6d0739be4db414dd249a15a1a5e10d2171c587af0790886c8752d695b9b584136d2f4a979e4dcf45743f5c3a447e1dbfd9a2b1","ssdeep":"384:MId3prfWlfMoUemojGom14eeEB7tfioprX7yY4g0yDUcNbihP2xMAFvQq7ZD5WKW:MI3ijGo5EVddpL7yhgJzNhxMSv57X+B","tlshash":"01b2e1450f62536d92c602683f7364dd2bf34f143a5a7e0f50b9adc98c2db417a90776","first_seen":"2023-05-12T21:16:30Z","last_seen":"2026-09-07T20:23:51.537332Z","times_seen":8,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"astekinsaat.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"astekinsaat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}