{"report_id":"c43a291f-2d68-4b85-ad2a-ea1c71a08fc5","version":0,"status":"done","tags":[],"date":"2026-07-28T16:53:25Z","url":{"schema":"http","addr":"giris.casa","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"giris.casa/","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"title":"Giriş - Tüm giriş adresleri tek bir yerde!","dom":{"size":53149,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (392)","md5":"db39f3c61900851ac75cf67f6b5fe7f1","sha1":"09b3c5cacd145948676a9c7b6f8453348077e217","sha256":"9fd899f6d270b6efcd30d6e3492dfbb7d1ebdf1bb141eda05831ade2a23d3a69","sha512":"42591646121fdd8efd086663be86012c8999d897f0348448d6c3f90746435915132300ee5679d01bdfde68b71b9d17f84fb150e11347dffe4d000de5ea1d7fab","ssdeep":"768:vUQ50s5JBxBDABDzYBQuB+BP3BeBcHB5BcvKBZv0RvzBWBfzBBTBxullHp9SNh:vQ0/DUX8n2pWch3Ii90lNe7Ptbh","tlshash":"d833f1a690f6947b5273e1e7a6d71b3a2ef10117c8a8081532be0b181ffdd917913a7c","dom_hash":"domhash24baa9e0c51988baa4bf59c8b1788ee6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"giris.casa","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T16:53:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":13,"received_data":510077,"sent_data":7569,"comment":"","tags":null,"fingerprints":null},{"fqdn":"giris.casa","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-27","domain_rank":0,"first_seen":"2026-07-28T12:24:58.681164Z","last_seen":"2026-07-28T12:24:58.681164Z","alert_count":32,"request_count":16,"received_data":214302,"sent_data":8979,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":20053,"sent_data":603,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nostatz.vip","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-04T12:10:09.883563Z","last_seen":"2026-07-28T16:51:12.472647Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":636,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"giris.casa/","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a4bdc461a1d196cb515514b2aa52b2e","sha1":"5db04a3775330917827e3f627f8ce82a5e4c3212","sha256":"89d835ca7f1ac6897d0ffb7f56b7312fab2d842cd91d4e232a55e2a33351f6a7","sha512":"65f46fab164f70c9dc41a8cdf7e2f5ae6ad05653f0d65f35a17b167a868238498dce307a2405fd0274ba2279b9a5295012910528731ce9818f50cb37b40c5c65","ssdeep":"","tlshash":"fa61c05ff692267788bb3ebe2acf12643b3604475406d4123a7cc9461f91f911876af8","size":3265,"data":"","first_seen":"2026-07-28T12:25:02.896374Z","last_seen":"2026-07-28T18:13:34.0426Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7426522a6aebe376a7ea1c6b0bf3198","sha1":"00ac61060740051e206773033fc2a2b8fb2ac2e4","sha256":"820d300c52a92793f36050b9d92a62ffa89f40a0aa3780657653630a92839954","sha512":"0a47b2b2dc86eee2d5a1cc2243f3ee1b40068a51abdb07003030fbfcb41b786418453344134a40941736ac2d369f9b6c2a9cb96422c09837cbcf95fecfc5d246","ssdeep":"","tlshash":"d9e068a2e0023a840f5f0844921f264dd8e982927cff0944153956c0c320e6f8ea21f8","size":375,"data":"","first_seen":"2026-07-28T12:25:02.898709Z","last_seen":"2026-07-28T18:13:34.043473Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.176Z","timestamp":1785257578176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 12:26:04 GMT\r\nexpires: Mon, 26 Jul 2027 12:26:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188814\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-28T18:55:02.878352Z","times_seen":19416,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.184Z","timestamp":1785257578184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11624\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Jul 2026 10:39:42 GMT\r\nexpires: Tue, 27 Jul 2027 10:39:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108796\r\nlast-modified: Wed, 10 Sep 2025 16:58:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11624,"size_decoded":12437,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11624, version 1.0","md5":"bd4781a31b4215a1e80868802b3d0e05","sha1":"06ad36000cd89dec93e4398c5b62565ab1d1b1e2","sha256":"db5ff4db83e580426280e9337a58dc57d3a83784a1b03ad80914651594441d52","sha512":"49b11df2a23830aadb044f1b1dacb481b16f198bd93ff3b563f5edd9e3b87a2399564f025b5582c5cb49f373c9a7429004ba8250756d1a6c84d7b4fff9c6d9c0","ssdeep":"192:Gn+/zzyRJgQbETz4+DkOtGNaYtNceZyi6aGofEsXBymPIdXBOonkCKaIgwX:xeLxIcGkO4IbRaGofEsXBvPI7O67Y","tlshash":"8532b0c427abf992dc1040b1e94726820e15d753290e7805b6b472e1ae9a9c75189fff","first_seen":"2025-08-08T05:21:53.783325Z","last_seen":"2026-07-28T18:13:34.027584Z","times_seen":538,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/bahigo-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.273Z","timestamp":1785257578273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/bahigo-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:56:35 GMT\r\netag: \"acc-6579a9ae07f9a\"\r\naccept-ranges: bytes\r\ncontent-length: 2764\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2764,"size_decoded":2995,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1da0c2a9d8929a1236a7f11dac3545fb","sha1":"ad18a32ac676291b870b6171da87602c777c3c1a","sha256":"fef67e88ee1b8807c96ba8296dca08c487927381aead85021a2b3b13fb42af62","sha512":"8f189ab4863659d002fe708d749a23300aa25a039d184b545a683e25cbe51d56e9e75aa603ab5750ba4a50b13b1b52cc8ca6f36b0d170751e0571c8562f86120","ssdeep":"","tlshash":"b5515c2e9c9731d6da68d383ea10922f2ba20285e50a90bb161f3515d011ce0edc2042","first_seen":"2026-07-28T12:25:02.871177Z","last_seen":"2026-07-28T18:13:34.029385Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@500;600;700;800\u0026family=Inter:wght@400;500;600\u0026family=JetBrains+Mono:wght@500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.010Z","timestamp":1785257578010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@500;600;700;800\u0026family=Inter:wght@400;500;600\u0026family=JetBrains+Mono:wght@500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Jul 2026 16:52:58 GMT\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19369,"size_decoded":1758,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d6ea29935c7b82663ce6bc8406594f60","sha1":"263d583b3e68db248a3fbc1649005c65988958b8","sha256":"4eccb5dea195e9f4755bc1c67ea0153865aed23ca1a6fab996f668cb60d59a0f","sha512":"9cf6da84b499fb224b5895cbc29f9844a97ba5997e5043e69d77343b83439f2db0e3563e8febfeef506af0cedd56eeec20f852922ab3fb9d49f208af540a46fd","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlHG9Up3qnXfmG0dp3HKXClCmaRBUCj32:vXuM0pGC6C+rF/0","tlshash":"d992cea1042fa500eb431cc673cf7e3aad8e50966085d5b99bfe0c889ceec66237475d","first_seen":"2026-07-28T12:25:02.854928Z","last_seen":"2026-07-28T18:13:34.030213Z","times_seen":6,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":37,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.134Z","timestamp":1785257578134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 531764\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-28T20:56:03.178567Z","times_seen":248581,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":21,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.169Z","timestamp":1785257578169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11624\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Jul 2026 10:39:42 GMT\r\nexpires: Tue, 27 Jul 2027 10:39:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108796\r\nlast-modified: Wed, 10 Sep 2025 16:58:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11624,"size_decoded":12437,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11624, version 1.0","md5":"bd4781a31b4215a1e80868802b3d0e05","sha1":"06ad36000cd89dec93e4398c5b62565ab1d1b1e2","sha256":"db5ff4db83e580426280e9337a58dc57d3a83784a1b03ad80914651594441d52","sha512":"49b11df2a23830aadb044f1b1dacb481b16f198bd93ff3b563f5edd9e3b87a2399564f025b5582c5cb49f373c9a7429004ba8250756d1a6c84d7b4fff9c6d9c0","ssdeep":"192:Gn+/zzyRJgQbETz4+DkOtGNaYtNceZyi6aGofEsXBymPIdXBOonkCKaIgwX:xeLxIcGkO4IbRaGofEsXBvPI7O67Y","tlshash":"8532b0c427abf992dc1040b1e94726820e15d753290e7805b6b472e1ae9a9c75189fff","first_seen":"2025-08-08T05:21:53.783325Z","last_seen":"2026-07-28T18:13:34.027584Z","times_seen":538,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/intobet-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.267Z","timestamp":1785257578267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/intobet-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:58:03 GMT\r\netag: \"85e-6579aa02834c4\"\r\naccept-ranges: bytes\r\ncontent-length: 2142\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2142,"size_decoded":2373,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"34fe8b869f8811e6e462fa20596819bb","sha1":"4d50e2599485b7775e597cebe61edffbf6bfa5a3","sha256":"652dcba1265720681015c9ddf8fe449ab1cffbe52d5a125b3b81ba372a49bab8","sha512":"e0c770138593195d4a70c7e549d22a78b0725390ce8fcf8c76226c263f0a43216fbad7e4ecabeaf5fca9500d86b1798175084c8078f1a3c696c9e2078573955a","ssdeep":"","tlshash":"c641e7d6c51807b6d24a35ce777f41cef68c15fa24008856a5523da22626e3a4302bb9","first_seen":"2026-07-28T12:25:02.880337Z","last_seen":"2026-07-28T18:13:34.031957Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/jetbahis-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.274Z","timestamp":1785257578274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/jetbahis-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:58:06 GMT\r\netag: \"de8-6579aa05436a8\"\r\naccept-ranges: bytes\r\ncontent-length: 3560\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3560,"size_decoded":3791,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a82e5870f91ede64380606247a8cc5a0","sha1":"e52ef59a4bec8fc111e871df7dd187d4c93f52e2","sha256":"4aa5eb9cddc4827ca81ffd55f9446e19f5f81199ffe29acadd29ca666c566a1c","sha512":"4d382051bdfa7e0fcf9666b7bfe6fa6d1f83b0f3db2765b6442477d0bd4eb3ce255967e5636929791df62d02ab8ffde04628b2de9b531bf10dc1ac1dfe55627c","ssdeep":"","tlshash":"81714db805a82788491337ba9a9707b1333babc6dd52ac259458f675885c0043becb3b","first_seen":"2026-07-28T12:25:02.85138Z","last_seen":"2026-07-28T18:13:34.033782Z","times_seen":5,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/bahibi-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.275Z","timestamp":1785257578275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/bahibi-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:56:34 GMT\r\netag: \"9cc-6579a9ad90d56\"\r\naccept-ranges: bytes\r\ncontent-length: 2508\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2508,"size_decoded":2739,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"476bce9d2d145ab9f7e0711258a4a9aa","sha1":"b43557328c86d99e5a28a40da95f2813ffc6a86b","sha256":"f940d0e239eb135fe7bff7c64e7d96510e649d201370db54e07db5d0343f932c","sha512":"e747fcaadd3c27e40beff5d33b10ac27e2f2619b90f53c0b0af9ae80c49a86e97c038495ab3f955aa81c671e5c9f3ebe6ce46b42a21f313ecd194250d2c4b95e","ssdeep":"","tlshash":"ff514caa9cc5031b2402559bd0d0a875596a33749149d3edffeb3b41d819414a27264c","first_seen":"2026-07-28T12:25:02.86376Z","last_seen":"2026-07-28T18:13:34.04179Z","times_seen":5,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/favicon/android-chrome-512x512.png","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.446Z","timestamp":1785257578446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/favicon/android-chrome-512x512.png HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:56:20 GMT\r\netag: \"104ab-6579a9a030bf6\"\r\naccept-ranges: bytes\r\ncontent-length: 66731\r\ncontent-type: image/png\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":66731,"size_decoded":66964,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"988c73f0eff1f96a0aede25e21e7a593","sha1":"d3dc9dcae9445551b0ff8ced6ac064c7bebe1b44","sha256":"1e19e798f4d75f014360b9f0f3f5983bf8828f7a24faa60163caa3dd4837b97e","sha512":"0af989e0c1fbfc6381ff9285ed7d16f64cd8b6f86f31a3284aee2b5ff287d429069008900520bd5604583695ebd5d0ab0a0acec7ec476d5bf25f71e883b4707d","ssdeep":"1536:k149iPhfwTT/eASkb1lqQHNL6ePJrw12X7UzfzEPEpo:K49+hIOFyDxNL6ePVxX7Uncqo","tlshash":"796302221aedc75b6ac1387e323ca4c13638321b7367c855e14fe76176916cdd8272ad","first_seen":"2026-07-20T12:55:06.727753Z","last_seen":"2026-07-28T18:13:34.040812Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/favicon/favicon.svg","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.447Z","timestamp":1785257578447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/favicon/favicon.svg HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:56:23 GMT\r\netag: \"178-6579a9a303a63-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 262\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":376,"size_decoded":547,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"151b534ef7703c24ad3b03b02bc34148","sha1":"86ff0ae004938a029566e67c746ba2022ca848ca","sha256":"63c02d8fb9291a1937532f47d2211131e03889d0f5059381ef5f0307ba501f11","sha512":"f87466105bad3b699df7b0f488831b6565d9cc98522009ec7e673913eeae5dd364327673200820d4786e3fa40550bfeaa04b7fb51a2602285385396554dca2f1","ssdeep":"","tlshash":"0de0680081c49b088b248d1a2f26fa59716be0c685c54f58f6dc6e631fcbad32a8338d","first_seen":"2026-07-20T12:55:06.725847Z","last_seen":"2026-07-28T18:13:34.03791Z","times_seen":11,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.174Z","timestamp":1785257578174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 531764\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-28T20:56:03.178567Z","times_seen":248581,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.179Z","timestamp":1785257578179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 12:26:04 GMT\r\nexpires: Mon, 26 Jul 2027 12:26:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188814\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-28T18:55:02.878352Z","times_seen":19416,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/css/style.css","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.013Z","timestamp":1785257578013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 15:36:27 GMT\r\netag: \"cd95-657997c4dd7a6-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8717\r\ncontent-type: text/css\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":52629,"size_decoded":8999,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4dc9b4aa433510e2e436e5575ac43538","sha1":"0c9bb4d2b22d4b3cd1b504d65d86732be91704d7","sha256":"bbf180993b5eee15a26e40c85fbc4583e78dc30cad9032ae3bceade43b75a708","sha512":"6fa4669530ea1621565d23ea2066adb53d5434bab1d5f0b693b2b48a3922ce5a0b40df38ad839e3656bf1598d2c0252c8171504d2e89b68557102b006fa03422","ssdeep":"768:/rEatFXTj29Xqk6ZsyCQm3ZX2yuDJvj8DEg:/lo9a9s5N3p2yuDJvj8DEg","tlshash":"b933415267349134b927ae6477bbaf59b3186403c805a5b8aae400cccdfd2fddd92b4c","first_seen":"2026-07-28T12:25:02.85726Z","last_seen":"2026-07-28T18:13:34.025734Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.172Z","timestamp":1785257578172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:26:17 GMT\r\nexpires: Fri, 23 Jul 2027 02:26:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 484001\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22553,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-07-28T19:09:09.90365Z","times_seen":985,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/mobilbahis-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.271Z","timestamp":1785257578271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/mobilbahis-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:58:35 GMT\r\netag: \"902-6579aa2070dd4\"\r\naccept-ranges: bytes\r\ncontent-length: 2306\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2306,"size_decoded":2537,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91fdec5468c416f8365867f6a1b77bc2","sha1":"9bbb7a8ca57881f8a17f2d42f79f92e28ddd6b44","sha256":"bbb96be7bc527fc8bae535ce9508568380da7f68e3e937b7b0b0f1449cb1f373","sha512":"a62d2e0fac57633a47f59fa3c96aec516a7f39239cd6e9e0cc43b8a6440e88167f18a1ead11ac2a50bedc05248e873ffa6d825a80e1bcd7916943fa3a0e62f07","ssdeep":"","tlshash":"ae41197b6344114e276a19393d5a9a7bf42ad0c013400bf22a49d847345e29fae6842f","first_seen":"2026-07-28T12:25:02.861102Z","last_seen":"2026-07-28T18:13:34.028484Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/jokera-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.272Z","timestamp":1785257578272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/jokera-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:58:07 GMT\r\netag: \"89a-6579aa064e44a\"\r\naccept-ranges: bytes\r\ncontent-length: 2202\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2202,"size_decoded":2433,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12f81e6006171c59439a3a72fc244339","sha1":"6f7ba8e232fb59a4ebeb9024246ea95c1a79bd78","sha256":"eba4308886c191ef9f7e8ee20032c4b307aad3b1cbc3d50d672b0097270cbdd2","sha512":"b09a0e30c8f37039f6ac6f1b3d28a8c503f97e085500ab6d79490cd18ba66df7f100bb49cb0cbcb948ba98f21f2198ce7d27e26f23c84efcdd37599924df8f51","ssdeep":"","tlshash":"bb412c54c7bd759d93126e5959bc12357f93c3514cc70f09dd31a08acb51660170932e","first_seen":"2026-07-28T12:25:02.889691Z","last_seen":"2026-07-28T18:13:34.037102Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.177Z","timestamp":1785257578177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 531764\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-28T20:56:03.178567Z","times_seen":248581,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.183Z","timestamp":1785257578183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 06:04:22 GMT\r\nexpires: Fri, 23 Jul 2027 06:04:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470916\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-28T20:00:12.90199Z","times_seen":11398,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/betelli-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.268Z","timestamp":1785257578268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/betelli-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:56:49 GMT\r\netag: \"8f0-6579a9bc11452\"\r\naccept-ranges: bytes\r\ncontent-length: 2288\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2288,"size_decoded":2519,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f9b7b907c47e25ec2e10a0ed4b81a658","sha1":"f16205699b6e1173d3a136e7c569ce1cf2be0840","sha256":"5637d52ee6015bc1ed5bc4af1fd39babc00d2fcbe3b1f2bc8aaf4aad59bebae4","sha512":"214153827e98b89893b44c7be41adecb321f4c0ae001a4915a5977c0c6cbeab9fcf8707084587b157b4df87fb1a51a3c5bd35f09e5e85c4231e1aaf694b5fdf4","ssdeep":"","tlshash":"da4119f125cf38d0a6ebdd6256f859c1807c1e211b6886f46eb0eeff0d009193a4578d","first_seen":"2026-07-28T12:25:02.875102Z","last_seen":"2026-07-28T18:13:34.036244Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/betroad-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.276Z","timestamp":1785257578276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/betroad-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:57:02 GMT\r\netag: \"eb8-6579a9c7df86b\"\r\naccept-ranges: bytes\r\ncontent-length: 3768\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3768,"size_decoded":3999,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ccc84ec33c299a79615688beefa9098","sha1":"c1e900fc4053471e0a5ca9c1fad7be3b06261ec3","sha256":"0ae9283c300d53bcf52ad6c954dcf57867fdb9c4e41c6115bb5766f6ef6e14cb","sha512":"a7246f8f29ff1a82b468de4993f01461910f45370fad45ca1979294dd54c933589669ded94c3b9db1e464ef64009c28b7d233487ee99ad36ca282385ccbbe452","ssdeep":"","tlshash":"4e716cdafd26f2facb538c368a310d8fdd8c264852b4a82db3d6cd6110815a24149a56","first_seen":"2026-07-28T12:25:02.866084Z","last_seen":"2026-07-28T18:13:34.023465Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.132Z","timestamp":1785257578132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 07:42:15 GMT\r\nexpires: Fri, 23 Jul 2027 07:42:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 465043\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-28T19:38:13.665099Z","times_seen":19009,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":19,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/hovarda-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.278Z","timestamp":1785257578278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/hovarda-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:58:00 GMT\r\netag: \"1548-6579a9ff2dc32\"\r\naccept-ranges: bytes\r\ncontent-length: 5448\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5448,"size_decoded":5680,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"54a9b636e6b42ef4f566ea7fd58631a4","sha1":"1962506cf2df0f4fdf2472b40156295afa3a60d6","sha256":"8d8d08ffb6d585cc67c8994d6f0de80423a548bef2d834b3b31399567ebe3627","sha512":"f049372a4ae7a90c3571c0799964463bb58e2559cebf96df48cfba1ed88f9145cfa1952e485289c29e19f1502b8336f2629adbcffeebc3766d7a340ac587a668","ssdeep":"96:N8YD+lSqA3syFVkNi7cBQzaGL+R8fGZgib+VH2E7HDIaYeLYohT:NDSlSRWY7TSR8eZgi6lfDIaXdhT","tlshash":"b1b18ec24ddd7bb304afa4a0cd4c54e8532697af351c764a3b397a9940aefb64023db1","first_seen":"2026-07-28T12:25:02.891906Z","last_seen":"2026-07-28T18:13:34.039973Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.181Z","timestamp":1785257578181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 07:42:15 GMT\r\nexpires: Fri, 23 Jul 2027 07:42:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 465043\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-28T19:38:13.665099Z","times_seen":19009,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/wettigo-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.270Z","timestamp":1785257578270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/wettigo-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:59:33 GMT\r\netag: \"111c-6579aa57e9edf\"\r\naccept-ranges: bytes\r\ncontent-length: 4380\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4380,"size_decoded":4612,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"643ef34a49363baf9cedc1e98ae7d004","sha1":"94b377670b315a9886f8b3f28771e532d5df5701","sha256":"afbf9137329f77ba4df70e0e99dd1d2595bbd16c10bdf9ca89959489d997f29b","sha512":"bf3e3ecc38d9f0f1daf1d71e062b3d200fd1688f617b8b0cdb449472ce6013d44735b1f5ad0c612270e5329105479c9836299633cea58d36c5f61602a0b82ad9","ssdeep":"96:oCsboAeynTFjPy01FLzhmXGhPqSnQwfCRj6Vjcp2D:tsboBynTdXw2EDRj682D","tlshash":"a0917da9f6e659d6105d1862748dcad30eccab5b5c25cc93024902b560a3b9dbccbc3a","first_seen":"2026-07-28T12:25:02.887399Z","last_seen":"2026-07-28T18:13:34.022438Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/rexbet-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.276Z","timestamp":1785257578276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/rexbet-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:58:59 GMT\r\netag: \"ac0-6579aa374c17a\"\r\naccept-ranges: bytes\r\ncontent-length: 2752\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2752,"size_decoded":2983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"660cf52d40ed6190f86bda75ba0c8c37","sha1":"f0124ff380158ce61859061f3020195fb81883ba","sha256":"64a2d504578799ba0cab23deee8dae4309c03a11671d7fe948c39dd11cd85525","sha512":"c28d57c125ab2c167bc05386dada5ccd40287f8625bd4f69f3c08045681281f779e09d2345008c90e6e1420903590842a314e8100c13961e5f41d3ab68840027","ssdeep":"","tlshash":"28514b7ae75ea1c2554c3c16cab1f94254e81bf87f16e6b6abf42438632bc1cc51a370","first_seen":"2026-07-28T12:25:02.884832Z","last_seen":"2026-07-28T18:13:34.039087Z","times_seen":5,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/assets/img/sitelogos/bets10-logo.webp","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.279Z","timestamp":1785257578279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET /assets/img/sitelogos/bets10-logo.webp HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 27 Jul 2026 16:57:03 GMT\r\netag: \"d76-6579a9c8d699a\"\r\naccept-ranges: bytes\r\ncontent-length: 3446\r\ncontent-type: image/webp\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3446,"size_decoded":3677,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"adc5a2304d765556b02ee8bf78b17c17","sha1":"4fedb1dd4e8c15e00c499f8c03409dfedd5cccc4","sha256":"1ff97bd928e0bf745fac1f6f5922b6172030ebe7477b3b25f573aa68de71e402","sha512":"f748fbea7633e7729834bc2ecb1490a6f106a946f84ee7bc590999b4648858afce811a133f2b8f5bc5c050cbe2c7727de9bf492fe98229dcdc6fbf7acc9c2856","ssdeep":"","tlshash":"b9613bbf0bafa50da1508d0c159876f163e48044da7410a796184b0aab3d9e01fac8fc","first_seen":"2026-07-28T12:25:02.882666Z","last_seen":"2026-07-28T18:13:34.034612Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giris.casa/","fqdn":"giris.casa","domain":"giris.casa","tld":"casa"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T16:52:57.500Z","timestamp":1785257577500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giris.casa","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:24:53 GMT","end":"Sun, 25 Oct 2026 13:24:52 GMT"},"fingerprint":{"sha1":"21:DB:11:C1:6A:95:ED:C1:81:0A:85:96:B0:2F:D7:A4:28:27:7D:2A","sha256":"9A:D6:CD:FF:DD:A6:67:76:18:2B:06:07:DD:2B:0F:4A:61:66:F2:27:88:47:30:4F:6B:49:AD:51:69:E0:87:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: giris.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=uf6202hbdfuv2khithsve48g6u; path=/; secure; HttpOnly; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 6925\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 28 Jul 2026 16:52:57 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":53031,"size_decoded":7322,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (399), with CR, LF line terminators","md5":"30418f0bb9328845b0776b5ab5733cb9","sha1":"3def11603dc4e164cc5a6193be35c059e727707a","sha256":"234a68887cb29ebc0580ef53ea514ea690e2e066a8e73ff9016a5ff43848052f","sha512":"fed8ee209c226beeaa1b04ca1f9430e85316f22a5eaa6d1bb2abc350ae177943faea438722c543848aba266c6f00378e6d19d3fb17bbe0cc68a9a1420cf96486","ssdeep":"768:LyU50oBxBDABDzYBQuB+BP3BeBcHB5BcvKBZv0RvzBWBfzBBTBxullHp9SNF:LoM/DUX8n2pWch3Ii90lNe7PtbF","tlshash":"ad3301a690f6d47b5273e0e7a6d71b3a2ef10117c8a8081532be0b581fedd917913a7c","first_seen":"2026-07-28T12:25:02.894344Z","last_seen":"2026-07-28T18:13:34.024752Z","times_seen":5,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":36,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"giris.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.167Z","timestamp":1785257578167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 06:04:22 GMT\r\nexpires: Fri, 23 Jul 2027 06:04:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 470916\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-28T20:00:12.90199Z","times_seen":11398,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.186Z","timestamp":1785257578186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://giris.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:26:17 GMT\r\nexpires: Fri, 23 Jul 2027 02:26:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 484001\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22553,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-07-28T19:09:09.90365Z","times_seen":985,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nostatz.vip/track.php?t=9e132b2f4369efbbf7d9\u0026u=%2F\u0026ti=Giri%C5%9F%20-%20T%C3%BCm%20giri%C5%9F%20adresleri%20tek%20bir%20yerde!\u0026r=","fqdn":"nostatz.vip","domain":"nostatz.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giris.casa/","date":"2026-07-28T16:52:58.280Z","timestamp":1785257578280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nostatz.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:45:55 GMT","end":"Thu, 01 Oct 2026 14:45:54 GMT"},"fingerprint":{"sha1":"56:E4:A6:D7:B9:76:07:E0:B3:50:BC:E3:02:15:B2:82:7D:DF:FB:41","sha256":"2D:48:14:09:1D:10:BE:C9:16:B6:6F:97:74:FB:35:22:85:6E:ED:6D:86:AA:AC:F6:85:29:C9:B5:FD:17:36:EB"}}},"request":{"raw":"GET /track.php?t=9e132b2f4369efbbf7d9\u0026u=%2F\u0026ti=Giri%C5%9F%20-%20T%C3%BCm%20giri%C5%9F%20adresleri%20tek%20bir%20yerde!\u0026r= HTTP/1.1\r\nHost: nostatz.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://giris.casa/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-type: image/gif\r\ndate: Tue, 28 Jul 2026 16:52:58 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":268,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-28T20:59:47.202826Z","times_seen":1011932,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":129,"connect":19,"send":0,"wait":23,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}