{"report_id":"c665cf91-92b3-41da-bd7a-cde4b07767b6","version":0,"status":"done","tags":[],"date":"2026-09-11T03:27:29Z","url":{"schema":"http","addr":"garanthmn.art/","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":0,"asn":205759,"as":"Ghosty Networks LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"garanthmn.art/","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"title":"Garanti BBVA İnternet Bankacılığı'na Giriş","dom":{"size":12295,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (408)","md5":"97040bf4f8031c404cd78924258331fa","sha1":"dcdc0f75eba353297c19a6c909e4b981fb71d0a4","sha256":"793bd04010d23dd55e5e0d47f5b86d13ef0d2be28339c568c1b69941a0e4f768","sha512":"e816a5a73810212f91071fe2451bde1725376f09c4f914b61c5dff4b5b195cf2056dbcf15830e4fd7642da286da7cf08355a026841e58720b3df89dee4a83266","ssdeep":"192:V8TN0UV/bY98yT0pT3xxJL0ynl30j0ITgESmgwJkUj:Mo99TcT5LLqw/J5wJkG","tlshash":"6842a46178e5203ab5b6c9a1e4906b5e74a8c103d6078a68f9ac7779cfcb5c34d2378c","dom_hash":"domhashd948177936f3d5cc0cc631aac8f396a5","first_seen":"2026-09-10T08:06:05.425001Z","last_seen":"2026-09-11T03:27:30.483354Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"garanthmn.art/","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T03:27:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"garanthmn.art","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-06T23:07:00.048542Z","alert_count":0,"request_count":2,"received_data":254157,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"garanthmn.art","ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-09-09","domain_rank":0,"first_seen":"2026-09-10T08:06:02.076213Z","last_seen":"2026-09-10T08:06:02.076213Z","alert_count":30,"request_count":6,"received_data":82972,"sent_data":3335,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":10992,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"garanthmn.art/","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1599ac6512b677dddcbf6f2f04959256","sha1":"2165b904c46ddfb0da6a52e0b495f6281874bd7c","sha256":"21f2c9b1bcab6263d918e3e057461502d0057eaf5dd957af7123184b45399acf","sha512":"8a21600c8161383498312f82d3ff4ea49e310f1d56b4028eed8952d0f1c3f2a63603a2c9dc0a75edd9a6d1d6020e86a89b9e6b863e20a9eea2b09e9da5acfad5","ssdeep":"","tlshash":"c2f0234d3c56f01337fd3534c3238aaf3762070071c39524c60acc2468544c60856c4d","size":443,"data":"","first_seen":"2026-09-10T08:06:05.452607Z","last_seen":"2026-09-11T03:27:30.508216Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garanthmn.art/","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f564382f4115b15df3488bab0d3a7414","sha1":"319b77d4b2423c61b175349e1ec90bce1138e381","sha256":"519b15fde7632afad53be648c83132d2cae432c73bb73036a79b9a7dcac047c3","sha512":"aff45867da113eaa0bd924e2191f8646b689e30f19f153bd7d9f26a88c60c44f2f0763ed9a3ad5d5b0b2381129de9751dca816631862b932d4c9a614270246b0","ssdeep":"","tlshash":"b501cb523bf7593609bab2f20cce0388ba3402c42c5185a934b0db808e62cc067f79ec","size":670,"data":"","first_seen":"2026-09-10T08:06:05.455045Z","last_seen":"2026-09-11T03:27:30.510485Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garanthmn.art/","date":"2026-09-11T03:27:00.578Z","timestamp":1789097220578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garanthmn.art/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3642297\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IA43cegZ1ebiroRyxVcv5uwl8OL8usJGIvJ7Spp%2FhvzD5gEII1l3iZ7TnFw5qxwMGvB0iewJeOv4BfNw5fFNfd2aJfc1jSS%2F0utUQBzETesSqjIhkyjW3d4afsIt7ggI45TH1pJ5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a39392fcbffd75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":19755,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-09-13T06:04:08.072285Z","times_seen":61830,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://garanthmn.art/","date":"2026-09-11T03:27:00.806Z","timestamp":1789097220806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://garanthmn.art\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 896877\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B24p%2Bz5BpGYjteQISTSDRTPX%2F8%2FziAzWwFuwcbm8jX422YxbfGPWirYHj1q1EVc793Ao7sFrj07rJATb%2F9AdR%2BPJZAnPVnG%2BQ4MXHxWga92oCeaWy5VV68rn9LaqBrmkz2G3Nt04\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a39392fe1a81b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":151129,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-09-13T05:19:36.550166Z","times_seen":46729,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garanthmn.art/favicon.ico","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garanthmn.art/","date":"2026-09-11T03:27:00.890Z","timestamp":1789097220890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garanthmn.art","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 14:23:03 GMT","end":"Tue, 08 Dec 2026 14:23:02 GMT"},"fingerprint":{"sha1":"04:CB:17:E5:A7:47:8D:38:E2:EE:CF:98:7D:71:74:3D:54:0D:DE:72","sha256":"1C:CA:61:1C:36:80:06:F7:4E:57:28:D5:6E:83:9C:CD:B8:DF:CD:A8:BB:6D:C7:E7:12:F0:7C:CC:E9:66:42:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: garanthmn.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garanthmn.art/\r\nCookie: PHPSESSID=e38f306b00f99410cad038f9d15c9c77\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html\r\nlast-modified: Wed, 09 Sep 2026 15:11:02 GMT\r\netag: \"328-6aa17706-f6df916f9d05e578;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":666,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-13T05:29:44.65851Z","times_seen":39135,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"garanthmn.art","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garanthmn.art/payment/acs-style/garanti/css/fonts.css","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garanthmn.art/","date":"2026-09-11T03:27:00.577Z","timestamp":1789097220577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garanthmn.art","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 14:23:03 GMT","end":"Tue, 08 Dec 2026 14:23:02 GMT"},"fingerprint":{"sha1":"04:CB:17:E5:A7:47:8D:38:E2:EE:CF:98:7D:71:74:3D:54:0D:DE:72","sha256":"1C:CA:61:1C:36:80:06:F7:4E:57:28:D5:6E:83:9C:CD:B8:DF:CD:A8:BB:6D:C7:E7:12:F0:7C:CC:E9:66:42:51"}}},"request":{"raw":"GET /payment/acs-style/garanti/css/fonts.css HTTP/1.1\r\nHost: garanthmn.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garanthmn.art/\r\nCookie: PHPSESSID=e38f306b00f99410cad038f9d15c9c77\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 03:27:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 01 Mar 2026 12:50:42 GMT\r\netag: \"479-69a43622-8d71f7eae8c5a789;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 411\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1145,"size_decoded":786,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a88acbaa0fb1152954d2e21609ea31d4","sha1":"b792affe39211f56328373851f25b181003db127","sha256":"772797e9611aef014dcd994173d94e560a850921cbcd498fd4e07d33e3ce43dd","sha512":"fed1b3c26ccdaee1502e7200887b3c41df036f2422bcba5ee932f01bf4d0ffc861f1ee2d282592107d226056b6aac04e742a3f52b30f04f86481300ebf85ab9d","ssdeep":"","tlshash":"6621d021d1046731e4b08a6eb7d2f722ef4d702af2c8605bf22d85959db2d259340f2e","first_seen":"2026-09-10T08:06:05.439805Z","last_seen":"2026-09-11T03:27:30.49345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"garanthmn.art","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garanthmn.art/images/logo-garantibbva-2x.png","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garanthmn.art/","date":"2026-09-11T03:27:00.586Z","timestamp":1789097220586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garanthmn.art","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 14:23:03 GMT","end":"Tue, 08 Dec 2026 14:23:02 GMT"},"fingerprint":{"sha1":"04:CB:17:E5:A7:47:8D:38:E2:EE:CF:98:7D:71:74:3D:54:0D:DE:72","sha256":"1C:CA:61:1C:36:80:06:F7:4E:57:28:D5:6E:83:9C:CD:B8:DF:CD:A8:BB:6D:C7:E7:12:F0:7C:CC:E9:66:42:51"}}},"request":{"raw":"GET /images/logo-garantibbva-2x.png HTTP/1.1\r\nHost: garanthmn.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garanthmn.art/\r\nCookie: PHPSESSID=e38f306b00f99410cad038f9d15c9c77\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 03:27:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 13:54:08 GMT\r\netag: \"1a4b-6a997c00-60eec801acf1b9fa;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 6731\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6731,"size_decoded":7064,"mime_type":"image/png","magic":"PNG image data, 333 x 60, 8-bit/color RGBA, non-interlaced","md5":"e1f79a5464d158415aac8f715a268676","sha1":"3773aa9f26a6f2e6ed71e1639d07750c3a0e57ca","sha256":"3541db151826636ff9b170b457d6019b1593a62f4782cb2e3846b61ed1bcf60c","sha512":"abe2b8e77551c5da70b8d09e804f85afd2496d6685f1037b9882786f7a667ce919160a5eb6dd17debf998d07e40c561212579de118d7c948a9e0c8fc74b5471a","ssdeep":"96:iYR2MYs2mYkEaXbL3MLCvQx/H0NuV1yYLf69hlQcG/oBUsJTRHersqabQd/6kGz:Tf533Mku0UV9Li3G/oys/H/xb4e","tlshash":"58d19e5ed4433cf322159e4f21d2f0438617c4448dad44e389f78c637ef8aa84a292ba","first_seen":"2023-04-30T19:06:55Z","last_seen":"2026-09-11T03:27:30.496324Z","times_seen":395,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"garanthmn.art","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garanthmn.art/payment/acs-style/garanti/fonts/sourcepro-600.woff2","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://garanthmn.art/","date":"2026-09-11T03:27:00.801Z","timestamp":1789097220801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garanthmn.art","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 14:23:03 GMT","end":"Tue, 08 Dec 2026 14:23:02 GMT"},"fingerprint":{"sha1":"04:CB:17:E5:A7:47:8D:38:E2:EE:CF:98:7D:71:74:3D:54:0D:DE:72","sha256":"1C:CA:61:1C:36:80:06:F7:4E:57:28:D5:6E:83:9C:CD:B8:DF:CD:A8:BB:6D:C7:E7:12:F0:7C:CC:E9:66:42:51"}}},"request":{"raw":"GET /payment/acs-style/garanti/fonts/sourcepro-600.woff2 HTTP/1.1\r\nHost: garanthmn.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garanthmn.art/payment/acs-style/garanti/css/fonts.css\r\nCookie: PHPSESSID=e38f306b00f99410cad038f9d15c9c77\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 03:27:00 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 01 Mar 2026 12:50:42 GMT\r\netag: \"74f4-69a43622-122d4289f8291456;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 29940\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29940,"size_decoded":30275,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29940, version 2.1310","md5":"77b59afad5193741b87b6866c7574bca","sha1":"ca2cb7f4c9339a7a453acb264d6e8146ad6cb318","sha256":"ad8b1c1a93376730dec4c04f9660d25375ab8686a360d86c6c52b4139a734a0a","sha512":"ad40f049850a112a06beabe8e67896dbb164d874128025f480700641d5d3e98dbfc1c949873b1f87684746524999ca4d6768e2ac284233f6fa4f7268f9b970bd","ssdeep":"768:dl8gDyO4cSq3VARcXifKepleuJpVhtxny4jI:0O6yGcXifKe7fVhtx3M","tlshash":"23d2e1a4476ac0cc4b1abd8328269c41a99e3d88dbca50b9b5887f7453b4d177c0daad","first_seen":"2026-09-10T08:06:05.443315Z","last_seen":"2026-09-11T03:27:30.497576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"garanthmn.art","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garanthmn.art/payment/acs-style/garanti/fonts/sourcepro-400.woff2","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://garanthmn.art/","date":"2026-09-11T03:27:00.803Z","timestamp":1789097220803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garanthmn.art","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 14:23:03 GMT","end":"Tue, 08 Dec 2026 14:23:02 GMT"},"fingerprint":{"sha1":"04:CB:17:E5:A7:47:8D:38:E2:EE:CF:98:7D:71:74:3D:54:0D:DE:72","sha256":"1C:CA:61:1C:36:80:06:F7:4E:57:28:D5:6E:83:9C:CD:B8:DF:CD:A8:BB:6D:C7:E7:12:F0:7C:CC:E9:66:42:51"}}},"request":{"raw":"GET /payment/acs-style/garanti/fonts/sourcepro-400.woff2 HTTP/1.1\r\nHost: garanthmn.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garanthmn.art/payment/acs-style/garanti/css/fonts.css\r\nCookie: PHPSESSID=e38f306b00f99410cad038f9d15c9c77\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 03:27:00 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 01 Mar 2026 12:50:42 GMT\r\netag: \"7528-69a43622-1ca8590b67bf5776;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 29992\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29992,"size_decoded":30327,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29992, version 2.1310","md5":"709319673124cfe6ff2274fbf14b567a","sha1":"8c45f03f5115185f28ec457067b6cd8bdfb10fa2","sha256":"3217257501cbbcbf2dd55ce53e51e9a3165da508929b3d914e1b55b070971ace","sha512":"c1d7f7629b054c662146ac68ca3d2df71c1eec5384bf31568d7bc42c414c0692e86d8b67c3a85c8b2dc852702b36a841e662fc6c0a353cfd493cfc3bf4482515","ssdeep":"768:6VgamKS6BrRGYnBBPbteb/ga4frzeFgSUZiPSvh1:6V5fS6BdGYBNt614ffIUGc1","tlshash":"2cd2f0431f8a9e50f0b270b78ad8434a3766f98cc4167b0b5b1a2e2757f7c4923670a6","first_seen":"2026-09-10T08:06:05.42897Z","last_seen":"2026-09-11T03:27:30.501061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"garanthmn.art","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garanthmn.art/","fqdn":"garanthmn.art","domain":"garanthmn.art","tld":"art"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:26:59.600Z","timestamp":1789097219600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garanthmn.art","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 14:23:03 GMT","end":"Tue, 08 Dec 2026 14:23:02 GMT"},"fingerprint":{"sha1":"04:CB:17:E5:A7:47:8D:38:E2:EE:CF:98:7D:71:74:3D:54:0D:DE:72","sha256":"1C:CA:61:1C:36:80:06:F7:4E:57:28:D5:6E:83:9C:CD:B8:DF:CD:A8:BB:6D:C7:E7:12:F0:7C:CC:E9:66:42:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: garanthmn.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=e38f306b00f99410cad038f9d15c9c77; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3961\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"e38f306b00f99410cad038f9d15c9c77","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=e38f306b00f99410cad038f9d15c9c77; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12226,"size_decoded":4416,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (408)","md5":"ef81fb3afb307bd8d704de48367a8372","sha1":"b100848235de3f36a43fc4d4c2a99d261e8ccff6","sha256":"3b5751b0c161408261c42b968fe0a32cad8cfe283b9b07267a5ac999a40fc3c4","sha512":"a8b33f2d1c57cef8e1a102edb652f50045fdaabf3bbc5790c1a01ba14a2fb1a26fa1aea773c5e4fbc241a85e4b046a57f9426ef165f5b555b4d9375e52204e50","ssdeep":"192:xTN0UV/wg98yT0pT3xxJL0ynl0Kj0ITgESmgwJkk:tH99TcT5LLpw/J5wJkk","tlshash":"5142a46174e5203eb4b6c9a1f4906b5a74a8c103d6478a68f9ac7779cfcb9c34e2374c","first_seen":"2026-09-10T08:06:05.446584Z","last_seen":"2026-09-11T03:27:30.504409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":0,"dns":309,"connect":41,"send":0,"wait":86,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"garanthmn.art","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"garanthmn.art","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Source+Sans+3:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garanthmn.art/","date":"2026-09-11T03:27:00.574Z","timestamp":1789097220574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Source+Sans+3:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garanthmn.art/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 03:27:00 GMT\r\ndate: Fri, 11 Sep 2026 03:27:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10308,"size_decoded":1448,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6af675a857340a05c7705ecb6722c59e","sha1":"d30e422bf532d96290d9246697faeb569d5793f2","sha256":"cfedbc8fd36b31fec62d3b91e670587f58cfa06b7574a2cdbca5206f655ea1e5","sha512":"e9c4cefabd5b450eb2f34457f350cca0ed17e4ae5abc2f6285b4145e035f418a0041e494441d81009ced17157692abdaeb5f673ea22786cab8cadcd0b6d64269","ssdeep":"192:dotTGM3U1NXyogy/M3JIN+IoqIRM33yN0PoZPiM3QhNbV:6DoG9UUv2","tlshash":"4d229ca1545b9458ab831cc237cf3e256d9e2011b095c27ddffe288cdceac2a5291b1e","first_seen":"2025-10-10T10:13:24.046566Z","last_seen":"2026-09-12T11:05:05.127816Z","times_seen":33,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":2,"connect":18,"send":0,"wait":109,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}