{"report_id":"9cf79943-b3da-48f2-b0d3-ef26cc74d1ac","version":6,"status":"done","tags":[],"date":"2025-09-03T11:43:29Z","url":{"schema":"http","addr":"dosya.co/72el7n49wdjy/mods.zip.html","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"dosya.co/72el7n49wdjy/mods.zip.html","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"title":"İndir mods zip"},"submit":{"url":{"schema":"http","addr":"dosya.co/72el7n49wdjy/mods.zip.html","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-08T11:43:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"gw.rickywhence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"gw.rickywhence.com","ip":{"addr":"23.109.170.189","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-09-30","domain_rank":0,"first_seen":"2024-10-24T10:21:14Z","last_seen":"2025-09-01T20:28:11.167933Z","alert_count":1,"request_count":1,"received_data":1443,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-27T15:20:49.600294Z","alert_count":0,"request_count":1,"received_data":2932,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2025-08-27T18:00:14.083167Z","alert_count":0,"request_count":1,"received_data":24682,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"apis.google.com","ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1075,"first_seen":"2013-05-06T20:20:21Z","last_seen":"2025-08-27T18:21:42.224669Z","alert_count":0,"request_count":1,"received_data":65205,"sent_data":411,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dosya.co","ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-11","domain_rank":98939,"first_seen":"2012-12-28T17:42:16Z","last_seen":"2025-09-01T16:24:15.759551Z","alert_count":0,"request_count":12,"received_data":223359,"sent_data":5476,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Bootstrap:5.0.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-08-27T15:34:43.182398Z","alert_count":0,"request_count":2,"received_data":1664,"sent_data":1939,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-27T15:14:26.687687Z","alert_count":0,"request_count":1,"received_data":3406,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-27T15:12:56.836113Z","alert_count":0,"request_count":1,"received_data":401548,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-08-27T15:47:22.247026Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":900,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-27T15:27:14.649202Z","alert_count":0,"request_count":1,"received_data":156623,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-27T15:11:05.791298Z","alert_count":0,"request_count":3,"received_data":124085,"sent_data":1591,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dosya.co/xupload.js?","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b93d4507a507dd3b262df968de263629","sha1":"5a94398e64ab70935df8d7c5ab70b5e1451a51ce","sha256":"f52bd322c3a2e09338bf72b845c59ac2b1c4ecffe5e0e0513010cd69ff7eec9f","sha512":"e6d033c5dac10fe446b96b07790418bb599418389901499fd2d45b65e86bc5090984741236b6e813f5eb1af44807f881f85673998b0c553e3224a684cb52d8f0","ssdeep":"384:qkS1z6Yc6A5KrqGcC/O7euVFjSRebVReDyYS7OsaaqwFdJWk0zfnXer:K1GDcrOJ7OsaaqwFdJWk0M","tlshash":"ab6297493d6310f295af307a1fbf52443638800b3085da59bd6c95d89fa0d6427ebebd","size":15267,"data":"","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.500389Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/js/platform.js","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"114621657f61474259b036d0a2040e24","sha1":"413fc04c1e47df82cbb2aadf7a9503cd08a3667d","sha256":"39c1a05796f7bc685ee4b6851bf90a0846bee7a2eceba8d632f4f0a63490e443","sha512":"49a9ab42d87ac1a39c1372a76c9b57ac1e3a92846d4c296202a34feb48299812e5749de08390e860429a88d44a55f602c26f9b6dadec8fa4d890bca07b5537e6","ssdeep":"1536:2DGSONNc+qljGWadpYqelGmCDm82GCfnL:7NcPsYq/m7Gy","tlshash":"e753ebd976a5703283a3b1a5103f010ef17b6da9fc4c98a8b199d4e42d78e89017bf7d","size":64345,"data":"","first_seen":"2025-08-12T02:48:32.797665Z","last_seen":"2025-12-09T16:54:15.613017Z","times_seen":1606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/jquery.cookie.js","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff14e4812b7f512e620b1ad35542bcfc","sha1":"c40c5f777e7a2f63e7b731b3cdb1fe9c806b23ae","sha256":"c4fb91befcf134b81ecfa1c586e1f9d6426c8f4fc1f6c130ac1fddb49ab5df96","sha512":"59e0276314814c6e033fbc81ab9f2541a86bfb85fc263397d0e3f3c1a0cb0c8e5fe2f833998245462903d8a7e9e499d2685b8fc44964935ad282e4e175753d78","ssdeep":"","tlshash":"84516650b7cc325e06ab22516b6f10ace63cff721158449d881965f82cb0c7bdb6bd6b","size":3121,"data":"","first_seen":"2023-03-07T01:23:22Z","last_seen":"2026-04-16T20:53:09.97783Z","times_seen":4480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gw.rickywhence.com/rrtViniu9oZScRH/113693","fqdn":"gw.rickywhence.com","domain":"rickywhence.com","tld":"com"},"ip":{"addr":"23.109.170.189","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-16T18:45:53.474758Z","times_seen":15572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/jquery-1.9.1.min.js","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-16T20:55:58.41547Z","times_seen":61915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/scripts.js","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9fb3cf87ee13f155ec562cd0da4c218","sha1":"10d89ced7cc970dbe934618775d45fa1a8dafc21","sha256":"5078e3c0bac573204f58dbd1c79b9c0b22512b694fb7ccde42033a21b4d8b3a4","sha512":"0334d96420885004cefaac0330373d181cfa28f6d9f5339aa6c9350ff9c7d5be49af920f8f3077ef1c5f2615cf4ac0c17368216e4cd066c7c42195536c11bab1","ssdeep":"","tlshash":"0811e5041ce3265c307b11f51b7f524421ad2447b14bcf00796cbb944fa69bc7b6bea8","size":1031,"data":"","first_seen":"2024-05-23T21:02:52Z","last_seen":"2026-04-12T18:47:30.505259Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://4619c593-5640-4563-9e8f-573018096c29/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-16T21:18:06.705533Z","times_seen":157939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MZEZ63PHNB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d31f4501eb2cc3bdc90bae73b76cc5b8","sha1":"029b821e94b5be661bc387fb64515b23f8f35aca","sha256":"b713b563593e9cc8f8b48e85797262543fc3536fd1b6355ccaba923f18fe5880","sha512":"f5d79b2182447ba616cc6f5c0b162a5bfc966f1f6de9aaab060a8f80782faf86c481fedb93fe7c40ed254caeda2353317fff4b2e677bfb1c99d94a0886ecd0bc","ssdeep":"6144:cRtZl+jA35idBwqOUDpcttA00nb5rIVL4cZotS1Y8wH5iM:wtZMj+wdBwqOUDpcXA99A1q8M","tlshash":"968419ce73c670269396f478503f018ba57b29a2b44cc899f189dce42e74a9a4177f7c","size":400547,"data":"","first_seen":"2025-09-03T11:43:31.973828Z","last_seen":"2025-09-03T11:43:31.973828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/tr_TR/sdk.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-16T21:18:06.626303Z","times_seen":152770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/72el7n49wdjy/mods.zip.html","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb974b14d1c70116dae02fcb218fae9b","sha1":"da6d589c0c50810b3f8e644cf6f3f28d9d2c9b06","sha256":"f4f0bde6fc07916757cb2ac768f28b1db76ed359799e8998c311406868a1c596","sha512":"ae7057330b10710ce66f299f17808d2c1a3a15520091dec2a1dd9bb1b35a5630eb757073e6119d27e3f3b51415b6b2e3031179fd05fc4563e524605e36c90bcd","ssdeep":"","tlshash":"1fb012143cb80e0a00321c040c3b620c16127c7193670010f82e10ec0b9a5143737047","size":95,"data":"","first_seen":"2023-03-08T16:25:30Z","last_seen":"2026-04-12T18:47:30.525685Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/72el7n49wdjy/mods.zip.html","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"77f55aaed582bb120987711e91c18a11","sha1":"7b82bc906e183d2d0f4638d7603a31f397cb510c","sha256":"8b908541fea8af4471ee2ad63b3fd195efb3e7079c6288f8dee8d07f23851136","sha512":"51c78ffc6f9e01520520f2e2979028757150d2279d1df17bb36e2a169d75ba3cfde80ea0d3de4bb6a357adc1e83556f6d9a2fd36cc9a872405a4d9865f98d374","ssdeep":"","tlshash":"22c08c88220e0cb041e626008b2faa00f0427214a4e06931881a63044d20e03df84810","size":153,"data":"","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.52647Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/72el7n49wdjy/mods.zip.html","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec2093ce772238beeadaf31e33fd028c","sha1":"f0cc9052bbffe9fdc7f1114d7e3708c269da067f","sha256":"2d9d7367fae6ba48f231202a3a22fbb013a161c7062e8d0703280a916848a1cb","sha512":"189a1072e25d385c5be9f516a9a76912f66c6ab9217f4df8b9b4252e2ed95a35b2ae8064de52c503cd734e7406f89610f38e97eb45d9a108f650b1fa4629c5e0","ssdeep":"","tlshash":"1cf0a30ea4e7202a2ab630bf477f0178316929131900d8107ccd819c2f64ed546a9fad","size":450,"data":"","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.527628Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/72el7n49wdjy/mods.zip.html","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"801feba4325b32bca047e4102317ab64","sha1":"16d3e9bd234ac428e12a99b5c0b4a3778d447ebb","sha256":"0b756d9b161451c1f398c93e69bce4957d1fd9b7c0b02a51077e1e234a96a944","sha512":"0952aed9e44ed98192f9d17bb28b147237f41af0ba4a22dd5fff0d6e9b5987e873d8c261d29e50dc5ee76d55897439f7584d301a23633fdcdb6741ae743e784c","ssdeep":"","tlshash":"ae11bd4d7097a49f05373174eb5f4005b5318253090ade863b4853706f6073b816f768","size":949,"data":"","first_seen":"2025-03-11T17:55:00.748591Z","last_seen":"2026-04-12T18:47:30.528114Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c8fd942c794c0f94999dc50c2838faae","sha1":"7eca9bc73eff348d4ea67903ef0359030e6439bd","sha256":"21c0856a56a17c859ff93b4d2c5745ccb222225299fc660116d592a707ad6f4f","sha512":"0934699b47c2e5c86e8a7093551eefe59b7976cfa0268a72da773ac381fbf2791fe3148ee115757de96a3f115fcad6cb1fff33097796f52d0396845f92f2411a","ssdeep":"","tlshash":"f390045543075f457015d00ccc5537335c3041474f347d4d5571d475d5cd114033114c","size":53,"data":"","first_seen":"2023-03-07T12:03:34Z","last_seen":"2026-04-16T09:00:34.914521Z","times_seen":446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"dosya.co/jquery.cookie.js","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /jquery.cookie.js HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Mar 2018 20:11:14 GMT\r\nETag: \"c31-567ddad2b4847-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=604800\r\nExpires: Wed, 10 Sep 2025 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nContent-Length: 1365\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ff14e4812b7f512e620b1ad35542bcfc","sha1":"c40c5f777e7a2f63e7b731b3cdb1fe9c806b23ae","sha256":"c4fb91befcf134b81ecfa1c586e1f9d6426c8f4fc1f6c130ac1fddb49ab5df96","sha512":"59e0276314814c6e033fbc81ab9f2541a86bfb85fc263397d0e3f3c1a0cb0c8e5fe2f833998245462903d8a7e9e499d2685b8fc44964935ad282e4e175753d78","ssdeep":"","tlshash":"84516650b7cc325e06ab22516b6f10ace63cff721158449d881965f82cb0c7bdb6bd6b","first_seen":"2023-03-07T01:23:22Z","last_seen":"2026-04-16T20:53:09.97783Z","times_seen":4480,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":109,"dns":3,"connect":27,"send":0,"wait":76,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gw.rickywhence.com/rrtViniu9oZScRH/113693","fqdn":"gw.rickywhence.com","domain":"rickywhence.com","tld":"com"},"ip":{"addr":"23.109.170.189","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gw.rickywhence.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 14:34:54 GMT","end":"Mon, 24 Nov 2025 14:34:53 GMT"},"fingerprint":{"sha1":"34:9E:BB:35:A9:76:C5:20:FB:79:82:23:A2:4A:25:DE:3C:D6:95:E7","sha256":"CC:B3:0F:3D:F4:9D:0C:F3:96:9D:F2:9A:1C:77:C4:6E:47:3B:ED:AF:08:A5:82:85:C5:A6:34:E9:8C:8D:77:E9"}}},"request":{"raw":"GET /rrtViniu9oZScRH/113693 HTTP/1.1\r\nHost: gw.rickywhence.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://dosya.co\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Thu, 04-Sep-2025 11:43:07 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Thu, 04-Sep-2025 11:43:07 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-16T18:45:53.474758Z","times_seen":15572,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":103,"connect":21,"send":0,"wait":21,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"gw.rickywhence.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/images/facebook1.png","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /images/facebook1.png HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Mar 2018 21:51:46 GMT\r\nETag: \"284-567df14ba2e6a\"\r\nAccept-Ranges: bytes\r\nContent-Length: 644\r\nCache-Control: max-age=31536000\r\nExpires: Thu, 03 Sep 2026 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nVary: User-Agent\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"b9098c3a00325d148cc3b0e374987ce9","sha1":"b8967780b3bf538e4a1e08648e4715d0734549c3","sha256":"a536f69561b103071bfac0f8b0fbcd512124e1b09c13bb05940eedb6eee70e73","sha512":"7f1bc910b5d0c08233a4939f44f79d6241f0889c24670edf39b80a0e25ec3ffc4fff68796f5e5b2e7ed74aa710a22899d85b8388b50e722b17bd4cfd31f6ba4d","ssdeep":"","tlshash":"58f02de2b654eb54cd2356b2048a0698e9f96fca125321bc8d4084000a28208e2d8bca","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.52346Z","times_seen":225,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0OCtLQ0Z.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/ptsans/v17/jizfRExUiTo99u79B_mh0OCtLQ0Z.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dosya.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29232\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 01 Sep 2025 14:33:50 GMT\r\nexpires: Tue, 01 Sep 2026 14:33:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162557\r\nlast-modified: Wed, 27 Apr 2022 16:03:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29232,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29232, version 1.0","md5":"c7f741a15ccd66de353c10ce76239018","sha1":"f2437766dcb49f046734fe3489d20317f264da30","sha256":"1a8635c7077b20e45b38d58f63b6562a47630e137c0e2c68b5b31611a8524a15","sha512":"7553e103b59d949918e4066b759e5a6464e552c589bf82b16ff387343b44bc9dafb9c2eba3532b41be3a9a28bf197f5b4435fcce364e678cc4fa5eaf780241b1","ssdeep":"768:7L2MwMYpmQObQhyLwh5Bt0REUhvrqCCerCZQ6INL21m:X2MwyQObQpraCeOZVm","tlshash":"57d2f1a93c0f1aa4cb500c5090a43c5e7bf7181951eea5fe1b5ba452bc66e8907e5d13","first_seen":"2023-05-01T18:57:58Z","last_seen":"2026-04-08T00:03:41.469132Z","times_seen":251,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":133,"dns":0,"connect":29,"send":0,"wait":15,"receive":7,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-MZEZ63PHNB\u0026gtm=45je58t1v878881116za200zd878881116\u0026_p=1756899787546\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=472459647.1756899788\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813~105426769~105426771~105427542~105427544\u0026sid=1756899787\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdosya.co%2F72el7n49wdjy%2Fmods.zip.html\u0026dt=%C4%B0ndir%20mods%20zip\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1193","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-MZEZ63PHNB\u0026gtm=45je58t1v878881116za200zd878881116\u0026_p=1756899787546\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=472459647.1756899788\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813~105426769~105426771~105427542~105427544\u0026sid=1756899787\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdosya.co%2F72el7n49wdjy%2Fmods.zip.html\u0026dt=%C4%B0ndir%20mods%20zip\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1193 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dosya.co/\r\nOrigin: https://dosya.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://dosya.co\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":41,"dns":0,"connect":13,"send":0,"wait":21,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=PT+Sans:400,700\u0026subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"05:AF:87:21:D4:6B:A6:86:ED:A7:D2:07:92:06:E4:D4:79:84:27:E8","sha256":"F6:EC:75:67:99:66:34:CC:0C:0F:9D:D7:8B:6A:04:94:98:0C:7B:B5:47:E2:47:37:A6:F8:E2:08:99:72:AB:BE"}}},"request":{"raw":"GET /css?family=PT+Sans:400,700\u0026subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 03 Sep 2025 11:43:07 GMT\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2720,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"257037e58235bcbdc11eae80d78d168c","sha1":"e38070997b05c5617529d746628f787652b4f4aa","sha256":"0a186ddb7e2eeb9f4d866606b8db9d79cb7730fef5c32f97921771f0d3a46c69","sha512":"fe608ab95f0206cb1f7a7c1a33105c2e6dc43522d514a900b5592334ad7d2e7d28e204da15faeed396210b3558ea1eb180958f59ed9297b4fd69c277d96c7c55","ssdeep":"","tlshash":"4751c192052bd840ab831cc523cf7d32ce5e61557049a826aaff1c98ed65e2d4371b5d","first_seen":"2025-04-07T02:52:12.373203Z","last_seen":"2025-09-04T13:09:53.640913Z","times_seen":293,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":219,"dns":1,"connect":28,"send":0,"wait":45,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/xupload.js?","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /xupload.js? HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Mar 2018 20:11:16 GMT\r\nETag: \"3ba3-567ddad45cd3c-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=604800\r\nExpires: Wed, 10 Sep 2025 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nContent-Length: 4464\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":15267,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b93d4507a507dd3b262df968de263629","sha1":"5a94398e64ab70935df8d7c5ab70b5e1451a51ce","sha256":"f52bd322c3a2e09338bf72b845c59ac2b1c4ecffe5e0e0513010cd69ff7eec9f","sha512":"e6d033c5dac10fe446b96b07790418bb599418389901499fd2d45b65e86bc5090984741236b6e813f5eb1af44807f881f85673998b0c553e3224a684cb52d8f0","ssdeep":"384:qkS1z6Yc6A5KrqGcC/O7euVFjSRebVReDyYS7OsaaqwFdJWk0zfnXer:K1GDcrOJ7OsaaqwFdJWk0M","tlshash":"ab6297493d6310f295af307a1fbf52443638800b3085da59bd6c95d89fa0d6427ebebd","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.500389Z","times_seen":241,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":109,"dns":3,"connect":25,"send":0,"wait":82,"receive":1,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/normalize/3.0.3/normalize.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/normalize/3.0.3/normalize.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 697\r\ncf-ray: 9794fcd5ff8ddfec-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03f2b-78e\"\r\nlast-modified: Mon, 04 May 2020 16:13:31 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 205654\r\nexpires: Mon, 24 Aug 2026 11:43:07 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=T%2BZtmxWPnVvwiakxQkULcyeGdUdb8mtZcatN9ILwGXT1UhIhgox55kk15OgpKcoeZ5qOYnFhfty6V6mc%2BfIME6lOXBzM0XRSdqNFYNMgZrbB2d0RGko46sm0RbGbyEdoPMVJ9DeH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1934,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1934), with no line terminators","md5":"350564e02a1f081bb16171bf2c9a10a4","sha1":"b70f77268b43925d62ab6354a9b377cbf0bfb475","sha256":"fcef96bd3d8479bd51214ea2308b44862e719474c22c78361e02e6546156c96f","sha512":"3a3aaded8a57a9833afff01d32112b577a2ddfcad880617940b244c31ef385eb232fd56a7e15a2473fdd58adb686c9fde91373d022e5f39fa98353f40667e055","ssdeep":"","tlshash":"9d41837363407a11e6334e307bc76b5963009231c052a99ef091aafedbc292326b4f4a","first_seen":"2023-04-14T08:16:03Z","last_seen":"2026-04-16T10:25:05.316554Z","times_seen":842,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":16,"dns":0,"connect":4,"send":0,"wait":11,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/main.css","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 26 Aug 2024 15:25:27 GMT\r\nETag: \"8c1e-62097bc0e8a54-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=604800\r\nExpires: Wed, 10 Sep 2025 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nContent-Length: 7778\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35870,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (764)","md5":"7e4f85f83daa37e6891c8621786f32e3","sha1":"150dbd1392001b1b34d59bebc8468a06b9369e4f","sha256":"238a61fb513df93cc79db290febe0d76aca2eca14ba184e894fde8549f5f3da1","sha512":"a7fec968003ec6c96a250599421d03276567737ec1da04e1e2a8ab8b3d0446fde16a4c028f9fafc8cd0496239e42abb51face2e4e5968ec78b0971b7c7ad2ded","ssdeep":"384:1tpkP5Y3gBny0FB2ckYrDQeTYJRv9yehVREEgTjBJoyWzjjdJy54ton1F1sHmYde:i5YCcckFFxf/QWzij/UY3bs7O","tlshash":"4bf2c632a2822808f027d0b97aa2dfa5672f0143c91f5e7dbdb535bcdb464e44572ec9","first_seen":"2024-09-19T22:15:21.552418Z","last_seen":"2026-04-12T18:47:30.51606Z","times_seen":230,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":113,"dns":3,"connect":27,"send":0,"wait":112,"receive":1,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MZEZ63PHNB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtag/js?id=G-MZEZ63PHNB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\nexpires: Wed, 03 Sep 2025 11:43:07 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 134651\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":400547,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"d31f4501eb2cc3bdc90bae73b76cc5b8","sha1":"029b821e94b5be661bc387fb64515b23f8f35aca","sha256":"b713b563593e9cc8f8b48e85797262543fc3536fd1b6355ccaba923f18fe5880","sha512":"f5d79b2182447ba616cc6f5c0b162a5bfc966f1f6de9aaab060a8f80782faf86c481fedb93fe7c40ed254caeda2353317fff4b2e677bfb1c99d94a0886ecd0bc","ssdeep":"6144:cRtZl+jA35idBwqOUDpcttA00nb5rIVL4cZotS1Y8wH5iM:wtZMj+wdBwqOUDpcXA99A1q8M","tlshash":"968419ce73c670269396f478503f018ba57b29a2b44cc899f189dce42e74a9a4177f7c","first_seen":"2025-09-03T11:43:31.973828Z","last_seen":"2025-09-03T11:43:31.973828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":3,"connect":7,"send":0,"wait":32,"receive":26,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/images/vk.png","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /images/vk.png HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Mar 2018 21:51:43 GMT\r\nETag: \"6a7-567df148e4462\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1703\r\nCache-Control: max-age=31536000\r\nExpires: Thu, 03 Sep 2026 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nVary: User-Agent\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f966c4a299458209dcde1f3452445100","sha1":"d66274c259781e9bfbf10c1a149af3d722642b34","sha256":"f981914f290d00f0cf8223f88d9875f46b87ec243db466ab4dc49cf31e1ef8c8","sha512":"239109e9f407dc07f0e5276386c3ecdd3212cc53bee1bceb458b0b81fa37b55f0fb98820bb30b27c039c5bf311273cb9bcea56474ac8a676141b31fc421fc0e9","ssdeep":"","tlshash":"90311a67008215b56b1ec4f3d5eb94d9f963dfe8347889f5471053bef8a92b020506a5","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.504651Z","times_seen":225,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/favicon.ico","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nCookie: _ga_MZEZ63PHNB=GS2.1.s1756899787$o1$g0$t1756899787$j60$l0$h0; _ga=GA1.1.472459647.1756899788\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Mar 2018 20:11:13 GMT\r\nETag: \"da8-567ddad23707f\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3496\r\nCache-Control: max-age=172800\r\nExpires: Fri, 05 Sep 2025 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nVary: User-Agent\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3496,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"76c1263332e9cfdf01d7d16e2e19cbd6","sha1":"11018d56822295813371ca6837df8fcb3cbc76c1","sha256":"615cc3281f3681c4a84d4206a63f520953a586749894d25c15cdfdc642373d2b","sha512":"573b86932032e115bb9378bcd746d2c9cd75b3a9cacd95b0fbf2958e77b47a2a376da1a0793035b3c15268c497ac1dc717b5e054e1a40e1b118ffb6287562447","ssdeep":"","tlshash":"51717eaf9a50755eac987e920acd5101d339317c9d12363895d215ce48e2c0a5b1a431","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.511195Z","times_seen":246,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/72el7n49wdjy/mods.zip.html","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T11:43:06.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /72el7n49wdjy/mods.zip.html HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:06 GMT\r\nServer: Apache\r\nExpires: Tue, 02 Sep 2025 11:43:06 GMT\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nContent-Length: 3539\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap:5.0.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9370,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a10b0e8e9f4070da68cb694c9c50836e","sha1":"455eb16128d461d95d1be5d7ae7e1545a7d61ad5","sha256":"a06167d6526f3683c4567d8d65384c33ba7c6378f2d5f6bff1a25b02148a6fe6","sha512":"7c74b7d2515050f743f930cf2b8d820cb3da23aa75c6eeef5f0ab2966095fa888f99af00ff4d5eba289e925a23952a9fb2a2a5163facd853044bc51237e67c45","ssdeep":"192:THQs+WH3+IQZBftXI3AvSndS0quoA/twFlQYYbPiqlc2Db1:THQs+c3+nZBftGMiquUePlc2Db1","tlshash":"8112c556bcd6dc2b116241f4f773ea0ea8624153d702ee84b1ac02b6bf90fa24c63649","first_seen":"2025-09-03T11:43:31.977185Z","last_seen":"2025-09-03T11:43:31.977185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":92,"dns":1,"connect":25,"send":0,"wait":203,"receive":2,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:43:39 GMT","end":"Fri, 10 Oct 2025 03:43:37 GMT"},"fingerprint":{"sha1":"C1:BD:D6:84:57:89:FE:9E:6D:F9:1F:26:76:1D:7C:45:E8:23:F6:35","sha256":"42:6A:B9:E6:CC:53:CB:12:2A:7A:43:B8:3D:90:FC:5E:4D:CA:A2:E0:3D:B4:2E:38:10:A6:6F:26:86:7F:D5:A0"}}},"request":{"raw":"GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9794fcd5ff5a76ef-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: US\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"04425bbdc6243fc6e54bf8984fe50330\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-proxyver: 1.31\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/15/2025 23:58:11\r\ncdn-edgestorageid: 1232\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-requestid: 8156a9127060c37c27b22e3c1aa6493c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: HIT\r\nage: 456963\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23739,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23577)","md5":"04425bbdc6243fc6e54bf8984fe50330","sha1":"8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5","sha256":"541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd","sha512":"8bcf90cad84e6324247ba5db4ad8edf53e3240786133ef58f724d8d5f3b1a03430b10a4a304a48a12419f265689ad9d509ff4f06fa100e72a5d3a80638e0f5f5","ssdeep":"192:nqxrZX8W+ab2edrKeTUKuErArKlcZJVrJ3ee+cR6waYm215bvfhf5DrkHUasT:Ws5yWeTUKb+KlkJ5de2UYmyTfhYUasT","tlshash":"c6b240f8e54d01d66731c48bff85b36862baf73dd5804d99f00f291c29d22a512c9bba","first_seen":"2023-04-05T06:51:49Z","last_seen":"2026-04-16T21:06:00.77849Z","times_seen":18057,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/images/logo.png","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Mar 2018 21:51:47 GMT\r\nETag: \"2c5a-567df14c89dad\"\r\nAccept-Ranges: bytes\r\nContent-Length: 11354\r\nCache-Control: max-age=31536000\r\nExpires: Thu, 03 Sep 2026 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nVary: User-Agent\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 34, 8-bit/color RGBA, non-interlaced","md5":"366827e3e11017bfc9ff2073b98d7bca","sha1":"d39fbadd43379e6be953f064f4ef837dc647a504","sha256":"7ed72d07bad4e847f9647546ddf0ef0177b4becdcb899ecf4bba18b76031fe7b","sha512":"7151d025e337dd55540cf321d06cf6f2d56459ffb2d1ebc4459e48f27c3a8825cb04eb78010fb7e0c7369e62dc19f5189b92cb9cf8c34f90f24c4348ffd2c893","ssdeep":"192:TSDS0tKg9E05Tq5kjBt55JhoSCOq8KezGhPi+8XoyHEfsAzfThB16vK:GJXE0597tdKezePX84ykVfdcK","tlshash":"7b32cf4e4c40e59b7d6e5f422464baa3a137a16f81e25c9c69c2e49c9a73c1a9724422","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.520272Z","times_seen":246,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":84,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dosya.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 47048\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 18:07:24 GMT\r\nexpires: Fri, 28 Aug 2026 18:07:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 495343\r\nlast-modified: Wed, 27 Apr 2022 16:55:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47048,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47048, version 1.0","md5":"87a1556b696ae2cb1a726bd8c4584a2f","sha1":"1be0f6f39e0cf316f9827f945eeeaef8294cc37b","sha256":"141f0c53e457585d4ac7426eb3d757666d250ee6fbf0e9c0878128e4c627f0b1","sha512":"ad9ee74772783ecf885c9d828d0d54fd4b65f66ba316ba0a5b241b910f4eced6dfa3ecfa4f2cdbeed4eb0ad9929ebc207f9ca3099348498f7e1acf7192fde98d","ssdeep":"768:Czwpv8MufPLEja54/un6n/rlUtUHTKgsdiEyvaFJWTVwkE0MsPGCYqEYny3TPCwB:8gvSfPLH5a/YUHJsdidvareax0MsPGCC","tlshash":"1323f1e005fc7eb5f66a669cdcca99b6ffd2050b91ce2a8cd19f304008b7816b53495e","first_seen":"2023-04-07T16:56:25Z","last_seen":"2026-04-16T21:28:30.197862Z","times_seen":5254,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":122,"dns":1,"connect":28,"send":0,"wait":15,"receive":11,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dosya.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 01 Sep 2025 13:03:21 GMT\r\nexpires: Tue, 01 Sep 2026 13:03:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167986\r\nlast-modified: Wed, 27 Apr 2022 16:11:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45300,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45300, version 1.0","md5":"5fe660c3a23b871807b0e1d3ee973d23","sha1":"62a9dd423b30b6ee3ab3dd40d573545d579af10a","sha256":"e13ffa988be59cbf299d7ff68f019f902b60848203ac4990819eb7e4624ee52d","sha512":"9eb08055befc2b70cc8bba34496f14414ea32f5b97f185d357f100ea7d74bfdc12afd815a53e629d02a53dc7f3e37096df8bbbd36ab44a011c1a4288b42780cd","ssdeep":"768:XNcHdvw7wbeW4t3x3dcjsflPt8YCRzGzgI/gBPaKkqnMMUQAbc6VBhXGGVJM/:XNmdvw73NAIlPtZCRzGzg+QPaKkqnMMv","tlshash":"4d1302bed59568a42c6e06e75ba17b03e7ab9f3260f97b2107c732a3c73455cd42108e","first_seen":"2023-04-05T14:04:03Z","last_seen":"2026-04-16T20:12:50.305694Z","times_seen":8096,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":78,"dns":0,"connect":15,"send":0,"wait":15,"receive":20,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/js/platform.js","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apis.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:18 GMT","end":"Mon, 03 Nov 2025 19:23:17 GMT"},"fingerprint":{"sha1":"F4:97:BD:FF:95:57:11:FB:7B:23:F9:AB:24:6A:93:33:FF:71:EC:9B","sha256":"DF:10:AF:3D:C4:E5:E6:F3:6D:04:D7:61:2F:03:0D:BE:4D:00:2E:03:CE:60:06:64:47:D0:C0:9A:03:32:50:AD"}}},"request":{"raw":"GET /js/platform.js HTTP/1.1\r\nHost: apis.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gapi-team\"\r\nreport-to: {\"group\":\"gapi-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gapi-team\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24205\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\nexpires: Wed, 03 Sep 2025 11:43:07 GMT\r\ncache-control: private, max-age=1800, stale-while-revalidate=1800\r\netag: \"6ea58cf23b6da0b6\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64345,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1863)","md5":"114621657f61474259b036d0a2040e24","sha1":"413fc04c1e47df82cbb2aadf7a9503cd08a3667d","sha256":"39c1a05796f7bc685ee4b6851bf90a0846bee7a2eceba8d632f4f0a63490e443","sha512":"49a9ab42d87ac1a39c1372a76c9b57ac1e3a92846d4c296202a34feb48299812e5749de08390e860429a88d44a55f602c26f9b6dadec8fa4d890bca07b5537e6","ssdeep":"1536:2DGSONNc+qljGWadpYqelGmCDm82GCfnL:7NcPsYq/m7Gy","tlshash":"e753ebd976a5703283a3b1a5103f010ef17b6da9fc4c98a8b199d4e42d78e89017bf7d","first_seen":"2025-08-12T02:48:32.797665Z","last_seen":"2025-12-09T16:54:15.613017Z","times_seen":1606,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":69,"dns":22,"connect":10,"send":0,"wait":21,"receive":4,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-MZEZ63PHNB\u0026cid=472459647.1756899788\u0026gtm=45je58t1v878881116za200zd878881116\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813~105426769~105426771~105427542~105427544\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813~105426769~105426771~105427542~105427544\u0026z=35669609","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:24:13 GMT","end":"Mon, 03 Nov 2025 19:24:12 GMT"},"fingerprint":{"sha1":"3E:B0:C4:B4:FA:2D:97:13:C0:5D:54:A5:36:F9:1A:59:D9:9D:92:F1","sha256":"C8:E0:35:A7:3B:00:18:A7:E6:50:B0:3B:2D:68:A1:CF:44:9C:22:64:BF:69:EE:FC:44:C6:95:AC:45:E7:7C:BA"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-MZEZ63PHNB\u0026cid=472459647.1756899788\u0026gtm=45je58t1v878881116za200zd878881116\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813~105426769~105426771~105427542~105427544\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813~105426769~105426771~105427542~105427544\u0026z=35669609 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 03 Sep 2025 11:43:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-16T21:13:44.870845Z","times_seen":800624,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":146,"dns":3,"connect":23,"send":0,"wait":38,"receive":1,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/tablo.css","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /tablo.css HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 21 Mar 2019 21:36:44 GMT\r\nETag: \"9594-584a188db2e37-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=604800\r\nExpires: Wed, 10 Sep 2025 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nContent-Length: 5463\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":38292,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9129)","md5":"d15abddffae3a6ba62fa24b5d4d8db57","sha1":"a250dc92675991a8e8e8b9c5a7a6532a49886b5e","sha256":"4fdccb9053939f1c4ab512c674b1ae9320cba6733d682d5e796b4b75da782bff","sha512":"c4ac97b56c88f921c5876a2d5e06878c3ed7b6d3ce2b6e5885e987cd767a9c047a5c89630cac002da15c12895d93c84f2088702bc0fb7abeb6091e61376a8f40","ssdeep":"384:aXkcYIGkus4ZSHLS1wZvjOqsFfvdLPBnDLl/nUwse+3FOQX+wPmb:aXdPDHLNWFndLPBEOwq","tlshash":"b20353756a043a6c3323c6c4e5917bdf3154c013da8206fae8e1b6b1da621f756f960f","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.52125Z","times_seen":239,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/jquery-1.9.1.min.js","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /jquery-1.9.1.min.js HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Mar 2018 20:11:14 GMT\r\nETag: \"169d5-567ddad2b30d7-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=604800\r\nExpires: Wed, 10 Sep 2025 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nContent-Length: 32775\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-16T20:55:58.41547Z","times_seen":61915,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":123,"dns":3,"connect":27,"send":0,"wait":78,"receive":27,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/scripts.js","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /scripts.js HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 16 Dec 2023 16:25:57 GMT\r\nETag: \"407-60ca2f8b55494-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nCache-Control: max-age=604800\r\nExpires: Wed, 10 Sep 2025 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nContent-Length: 535\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1031,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e9fb3cf87ee13f155ec562cd0da4c218","sha1":"10d89ced7cc970dbe934618775d45fa1a8dafc21","sha256":"5078e3c0bac573204f58dbd1c79b9c0b22512b694fb7ccde42033a21b4d8b3a4","sha512":"0334d96420885004cefaac0330373d181cfa28f6d9f5339aa6c9350ff9c7d5be49af920f8f3077ef1c5f2615cf4ac0c17368216e4cd066c7c42195536c11bab1","ssdeep":"","tlshash":"0811e5041ce3265c307b11f51b7f524421ad2447b14bcf00796cbb944fa69bc7b6bea8","first_seen":"2024-05-23T21:02:52Z","last_seen":"2026-04-12T18:47:30.505259Z","times_seen":223,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":5,"connect":36,"send":0,"wait":76,"receive":1,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-MZEZ63PHNB\u0026gtm=45je58t1v878881116za200zd878881116\u0026_p=1756899787546\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=472459647.1756899788\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813~105426769~105426771~105427542~105427544\u0026sid=1756899787\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdosya.co%2F72el7n49wdjy%2Fmods.zip.html\u0026dt=%C4%B0ndir%20mods%20zip\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=6219","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:12.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-MZEZ63PHNB\u0026gtm=45je58t1v878881116za200zd878881116\u0026_p=1756899787546\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=472459647.1756899788\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813~105426769~105426771~105427542~105427544\u0026sid=1756899787\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdosya.co%2F72el7n49wdjy%2Fmods.zip.html\u0026dt=%C4%B0ndir%20mods%20zip\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=6219 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dosya.co/\r\nOrigin: https://dosya.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://dosya.co\r\ndate: Wed, 03 Sep 2025 11:43:12 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dosya.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.0.2\r\nx-jsd-version-type: version\r\netag: W/\"260c5-fByeBXPlzqi603M74vxjqoxo6o0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 03 Sep 2025 11:43:07 GMT\r\nage: 2505867\r\nx-served-by: cache-fra-eddf8230173-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 20016\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155845,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"abe91756d18b7cd60871a2f47c1e8192","sha1":"7c1c9e0573e5cea8bad3733be2fc63aa8c68ea8d","sha256":"7633b7c0c97d19e682feee8afa2738523fcb2a14544a550572caeecd2eefe66b","sha512":"bac54101debafcda5535f0607b5f60c2cda3e896629e771ad76ac07b697e77e4242d4f5f886d363b55fc43a85ea48a6bfc460a66f2b1fc8f56b27ba326e3a604","ssdeep":"1536:d0bwW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fM:d0bwlyVUpz600I4fM","tlshash":"09e3a3d7f581241dd4a7c259a0d1bffd052f4586e3025babb0277bb88b8a6c70963e4c","first_seen":"2023-04-05T03:16:49Z","last_seen":"2026-04-16T21:08:22.567923Z","times_seen":94931,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":4,"connect":37,"send":0,"wait":27,"receive":8,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosya.co/images/twitter1.png","fqdn":"dosya.co","domain":"dosya.co","tld":"co"},"ip":{"addr":"195.201.111.49","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosya.co/72el7n49wdjy/mods.zip.html","date":"2025-09-03T11:43:07.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dosya.co","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:35:59 GMT","end":"Mon, 03 Nov 2025 15:35:58 GMT"},"fingerprint":{"sha1":"9E:01:C9:B0:CD:21:BD:F9:39:8C:82:0B:E5:6C:9F:9A:D0:06:78:F3","sha256":"34:24:42:FC:E2:C0:56:73:E7:FC:3B:5B:D1:C4:28:EE:17:3A:74:CE:58:66:B1:ED:9D:5D:0E:EC:2F:0C:07:7D"}}},"request":{"raw":"GET /images/twitter1.png HTTP/1.1\r\nHost: dosya.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosya.co/72el7n49wdjy/mods.zip.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Sep 2025 11:43:07 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 20 Mar 2018 21:51:39 GMT\r\nETag: \"297-567df144ce63e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 663\r\nCache-Control: max-age=31536000\r\nExpires: Thu, 03 Sep 2026 11:43:07 GMT\r\nX-Powered-By: PleskLin\r\nVary: User-Agent\r\nContent-Security-Policy: script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://apis.google.com https://connect.facebook.net https://qc.tahrsli.com https://gw.rickywhence.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com;\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"a9911bdf5c31b30e0161bf11d5222c48","sha1":"e9d161151f870b4894b97c6130fc3014846e897b","sha256":"b57a0a6a75d3dcc85984750ca9d5025f975330e6bbd8b3092e84c0be77496efa","sha512":"7b18fcf45c975b0e74e8bc13727684b319f30e7152ad3d953a44d722ce7d06924d2bc34d545ea5dcc33f914ed9a5a1327050cfc08b04c4f6492dec8edd0aeefd","ssdeep":"","tlshash":"c60168caf17878f1db476a3204d29a60d077494d3705547fdc50d9003a3974de0e2781","first_seen":"2023-05-25T23:46:28Z","last_seen":"2026-04-12T18:47:30.505821Z","times_seen":225,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}