{"report_id":"e55af67c-77b8-430e-8d53-524b8d1adfee","version":6,"status":"done","tags":[],"date":"2026-01-14T04:41:26Z","url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":0,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"title":"Scotiabank - Portal Empresas","dom":{"size":3484,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (815)","md5":"9f570bd9241c7e8010e02c38bed31719","sha1":"29b65dc3c728a027ffcfc7cbf9e258ed5863fed5","sha256":"743f0fb4e918893c72c6377a0111cfaabc732674ddcc512cf46ed933ed6b1ee0","sha512":"065f4e41846369757257cfadd8e2df36c4fa210b46588bedb372eba34eaa3c21f18fc63f5b69e712ba17f3a7f52ac8b5d9d3dc4c783f744e3965063e682f13b1","ssdeep":"","tlshash":"7d71c78c7651e46502a265f3932f3901b0a95564f00ef0ecb1799cd2bbb9d5b03a7bbc","dom_hash":"domhashb3f5b6bcedeca092e117211ec8b2568c","first_seen":"2025-11-05T01:51:12.889526Z","last_seen":"2026-05-25T22:02:06.152889Z","times_seen":104,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":0,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T04:41:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dmtags.scotiabank.com","ip":{"addr":"23.45.146.217","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":878914,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":627628,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":283,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":8,"received_data":2844895,"sent_data":3816,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.aglty.io","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":709543,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":84043,"sent_data":3204,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":22,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":2981,"sent_data":5175,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com.br","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":10468,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":1929,"sent_data":3502,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kbrmimarlik.com","ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":207,"request_count":69,"received_data":5020016,"sent_data":46504,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Agility CMS","description":"Agility CMS is an enterprise-level content management system provider offering scalable solutions for managing digital content across multiple platforms.","website":"https://agilitycms.com","common_platform_enumeration":"","icon":"Agility.svg","categories":["CMS"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"d10lpsik1i8c69.cloudfront.net","ip":{"addr":"3.167.7.195","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":5890,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":92680,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":580,"sent_data":780,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":4915,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":97752,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":22257,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":849,"sent_data":1159,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"9623b878212af788d8fed3831f7d23de","sha1":"d243be25fbc9692b24279cd1556f605becbe306e","sha256":"cf4dcac4bb57f0c4fc87b88a147f0bcfdd5eacd73f1ba6a4946feea1e307cc85","sha512":"955bc3103be33cd1cbd77993e7227a3264597a981e6dd317c38a1ee23fff06ebe9e46ea87c46f6237db9fdc40a1141c060478fcf74f45327406e7730f7ee1506","ssdeep":"","tlshash":"7be0201575d30c387547656f337e4e083152121b660dcd227d6d74685f046554aa9fcc","size":387,"data":"","first_seen":"2026-01-09T18:46:07.349583Z","last_seen":"2026-04-14T13:21:48.653033Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/lazysizes.min.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b80e49640d4794d4333d00db76ea22f7","sha1":"72ced7e7e78ccb760c4050d7ee12d86c38671756","sha256":"fb649fcae62177dfe63e67081ddceb830b5ce1f05a4184e9bbb7d87ac4b8f4e5","sha512":"4e60f014b860dd4038646d046f8308c93d4ed4c6fe3b0c399051b4b87a97b1d6f2673f4372f61084aa4680d91a98023a876946199ab65fc7ed389bc5fd78d352","ssdeep":"192:Vgk/3k4ffg9iCcINXC86/HxvIzy4AS0EqHAsjNxbO2p6rBBRnAxOn:Vvk99iCVx6/Rgzy4AS0vHAkxb9aBBRnX","tlshash":"86f1c49f795570b76bdb34b1416f610faa3239239d86e081d2b9d0800d3d84aa327f2d","size":7771,"data":"","first_seen":"2023-03-07T01:06:37Z","last_seen":"2026-08-11T08:40:51.308706Z","times_seen":2534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/581fee82337df.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"39f8e572ef830571828ee96a5e1ae3cb","sha1":"01e4c89c8d0e3963dd47535aefa51329374e98aa","sha256":"7c266e05d3841883558b00451f7e7a2cb72fe7eff21b62aec4614e4403c0d8f0","sha512":"4658ce1b1b2a7857096da6ab327ed58a71b1c8f1842bc088933933edf6e2e2eb825b64667a3f16953255ebb1602617b0545f2be8f0d8dfd11c7ddae072338f7a","ssdeep":"3072:AT+rHM9jRuxbXZQeR+5y/yI3GRkrKXslqV3IMG9+:Aqrs90nQel/yI3GRkhqt","tlshash":"3b64948cf691b0754393e1b1922f010ea33f656df44a45bcb199d8e22cb984e6627f7c","size":313031,"data":"","first_seen":"2026-01-09T18:46:07.194309Z","last_seen":"2026-08-04T16:19:47.34842Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/1517270105255357","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a45e2b7c9eca3d0a3e5f24bef37a56b6","sha1":"9e6fc6e45989bcc3b2bf6b7721b68df7d35d5a5f","sha256":"d7862f683a8ef03e7c31da4e90ee6270fb8486d0024abd4baf6fd7fbd89bc5e7","sha512":"1ef39ccec4d8bc2119bea8bef47ed61696b12ae263703c3e07df2098d83b0d028807c7b3ba5e8ef40fda4f2fe2d3df50aae4a5f87911e30e5e0a561aafe0668f","ssdeep":"1536:R7cpT6oj5+I9ZFKo1+eYaK4wpyscl9Y+ERJjjRWCpXH4/g:R7a9ZFKNeYaK4Zscl9X+x57","tlshash":"1183845621e4a177936ab96fef3f101b70f689427080cd20905cedec1bd96ed92329e7","size":87888,"data":"","first_seen":"2026-01-09T18:46:07.272954Z","last_seen":"2026-04-14T13:21:48.626684Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"21525223fc17cb9dd3026accf0fed423","sha1":"fd902baf1c0fe709e98e2cf7b4c0c14e0e830810","sha256":"a3e0c05d8e1008952ff3d72144d25b1b491b06abcec79e1610eddc47a6bef319","sha512":"c12b135b5b7d6d0861d27899527c1b378d6abda3e5bbd1b8fcdf4624e4f113734945c68d3a22cb3fc56b25ff4fd711b73f781fe27bc2a4e05d411fd3d4a05ff0","ssdeep":"","tlshash":"cfd0a7c0f83c16e4df68294699ec70c11f2d0136f86f72dbd49d2150050c22701bf509","size":250,"data":"","first_seen":"2026-01-09T18:46:07.383421Z","last_seen":"2026-01-14T04:41:59.672048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/medallia-digital-embed.js","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9420367f57781b06728e3dbf986efa61","sha1":"2670530b6796c3339d4f0bd49a81e6b488bfad37","sha256":"8e52a06b4200155d40de3db175901aea38b21ca7729c80757054fdabff7e45ce","sha512":"57ab9cb50b7a78bada6d14850f00828015c0597a63603ced5cf9a2a92e10e81c2d9aa4db90a3e4638f37c1424aa934df59b9c2779866f8fe62f8b03f0cf7dce1","ssdeep":"","tlshash":"0941fefa7f99e4115257256b2b9be709252b60d71c44d2c195b8ca90b031a4fdd2fcc8","size":1945,"data":"","first_seen":"2026-01-09T18:46:07.25957Z","last_seen":"2026-04-14T13:21:48.611857Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b4cf505e915a67af2a73d290dbaa3a4","sha1":"9d569af1bc77eaf16c28d35500b9cc60d79f6dde","sha256":"009d4db7eb7e15f66624bf4d23308c390442f0a5cd39831ee9f86032f5b5a278","sha512":"0671dbcf5265be47a41ee66a49cb3dfc6604b853e1757a680e797369876fa05a5f72247c7d2dcc62801ac13ff49d297742278e3a89100c03a0c698c5def07a65","ssdeep":"","tlshash":"e3f02e0b6400057d2be10047e5f7af2c71a330b95500d59242c49c1579aaebf8d5face","size":484,"data":"","first_seen":"2026-01-09T18:46:07.372994Z","last_seen":"2026-08-04T16:19:47.634833Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"662d5658e0f8be400957658d850b977a","sha1":"1136d630f472ee127b1003d67804ea54dbaab829","sha256":"bce71a7630b32615c70be09ef4f02fcc6c34dbc00e2738657ca1fd8f7e444f75","sha512":"7e39a0e197d4cea3132103684feecc35f30dd635f28017dc3100086aef71f98c1b7ed283dfbe2ee5f8e0b0320c2566e46c6a01bed6f5c05c163ba4a117401c7c","ssdeep":"","tlshash":"26113ae7e700953400fbb3121b7d93c062be728bb965a41d38089c98a699d8b1217cbf","size":1027,"data":"","first_seen":"2026-01-09T18:46:07.347301Z","last_seen":"2026-04-14T13:21:48.649172Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b2c4afbdd79a9fcbcc17208d35d16d0","sha1":"f7e1ef10a25536a0c203b06b94c6fa8aeef80224","sha256":"fe44caf09dbb75755c2a5925e24a9ecfb78f5f6094d6283e492068e6fe9aeedd","sha512":"5cd25f564ec6796a55637eb0419fdf02c97fbd11dd26c4793fb00e47604a37219d68351da019d79fbfb4d17f79d5d0a25cd9caaf7c3a98452628d8c8d0150e21","ssdeep":"","tlshash":"ccc09bb826575cb152ff4b91075f65452451332086d11535080671453735d772595c54","size":130,"data":"","first_seen":"2026-01-09T18:46:07.357265Z","last_seen":"2026-08-04T16:19:47.636559Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"752da3da37480614d156e7bde9f39ad6","sha1":"bab8bd866f7906ff63e98633845d3d55c05da75b","sha256":"e4b8f72b7ebef8182fce9879cb032555932f473fb65f1962a91283b0f2975b86","sha512":"48feaff54e09a6a906acc2489f5e2f0c296b04d3a088a0db8c4bff5a6ed638014e6fbb88dd15efac5a749902256fa433b321818c7316c19ac69d7185034162fd","ssdeep":"","tlshash":"28c02bb825035cb021ff0b41071f61002041333042c009200c0170852924d7710c8c50","size":130,"data":"","first_seen":"2026-01-09T18:46:07.381433Z","last_seen":"2026-08-04T16:19:47.639123Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f(1).txt","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8331463e4349e9a8501d5c8d3a8f6fae","sha1":"20970f6880fd38c279559e33d5e37f85f943c783","sha256":"bb4e49163d5265d9c3f31e4df2b399ba69b2185a1de999d35edb2a9b5ffba5d9","sha512":"368b0a22b9b4e73f5a9e452eb07f8c659c374a09f3ad514af3377f2485bd94886a6953a6a779936f366597783130c3ed5a8b4e30303be337878fc8dab38831df","ssdeep":"96:Eg1BcYm9PbxGKVk54Ele/3V6oGh1fclCM2nS5CM2nSa:EfLoh1wVg1UCM0S5CM0Sa","tlshash":"7ca1a49ab3a1b153d2a264b1672f650bf4397d63cccce410f661c8949cacadf209bf40","size":4847,"data":"","first_seen":"2026-01-09T18:46:07.29982Z","last_seen":"2026-04-14T13:21:48.641206Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9819833a24437aa7ce8b49c2b46b2b18","sha1":"0081cdef6b842825606c50cdfae93bb1b27b41fc","sha256":"1513479d96ec98712a96885bad27c016452cd25264e518f70c7b3ac2c697a3a2","sha512":"1ec521477641a136c122ebba114b01d166c591136b5fb03c6ee1e4abf8829d5f94b4c39e3bb6a847520ef1e747c0ed23b7c3f9dc7b30ef0c96f4b2d773000214","ssdeep":"6144:PkWcZ+l74EIsANa0Pqi9aSdg/YesItIAS:8WYS74dsANz9axG","tlshash":"e0a4189e73c6646652d6f478503f018ba8bf24a2b45c88a6f1d9cdf42d34a8a4173f7c","size":477387,"data":"","first_seen":"2026-01-09T18:46:07.303473Z","last_seen":"2026-04-14T13:21:48.622387Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d77bbf96ce27b65181b06b743a0c6afb","sha1":"4dfdc201b9585d354a7bebf44f4c0a2a5ac39db8","sha256":"dfec3b65df93c04bc50c6d3f373c57475d6c277b24593141d21661b184ed6fdf","sha512":"2e32d4ec4ad22c1d847a344c9eb3f38fdcb6ea039da791c1e4f518531c4a307db5fc046904b5d14d127d8a7973e4f828157ed3c3a3ac01bbfbdb50a1446905eb","ssdeep":"","tlshash":"32d05b604973145478f73461453f2500e1974041300ee698e81ded85ce94314957b8da","size":239,"data":"","first_seen":"2026-01-09T18:46:07.387221Z","last_seen":"2026-06-01T00:58:20.907168Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f(2).txt","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f68941cecfcd6daa366f5a1e3ad114a0","sha1":"64140f205cbcc64b4b4e4e4f5177db1ced80fbc8","sha256":"fc75de40f2c43c5e14c78a66dac64e6c4d18ff08130ea7ff388e80cc13aec817","sha512":"3efd1afa0ebf38dedeb4af4fa0c1d7bdcfad17492f6bac7891ef4ec1d5ca872dab5b4d66be35585f99f4f893ba27cdb814a6aa13142b4181e50132378c6e5d26","ssdeep":"96:Eg1BcYm9PbxGKVk54Ele/3V6oGh1fc0Sqfn0nSqfn0c:EfLoh1wVg13Sq/0nSq/0c","tlshash":"b5a1c6dab7a0b153d2a360766b2f6507f4397d43dcc8e400f661c8a49cacadf109bb81","size":5020,"data":"","first_seen":"2026-01-09T18:46:07.187709Z","last_seen":"2026-04-14T13:21:48.619321Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f5a62886b132862ee1702d43610659f","sha1":"862bbe97a09979576ead17599c99302eb28de38c","sha256":"99d86c72663699deccca8e307d5f37572d93f4eaaa4737a899cf0fb23a63aa0e","sha512":"bd1f93fef91bea9cc82841653a130d769d9264dfad8213ff90f765d5edd836e766def08cb14cc007d599fbd6706cc18ad55d601d68de545724f520478a15e8bb","ssdeep":"","tlshash":"0ee0a31d2c1fb47117b81968f377891530d5130125461755c797d4543971cc558c5b4c","size":423,"data":"","first_seen":"2026-01-09T18:46:07.358878Z","last_seen":"2026-08-04T16:19:47.632693Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=siloed_AW-1046484911\u0026cx=c\u0026gtm=4e61d0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96840620c4a89eed184dce593aadb920","sha1":"d2298e97cb42167bee80dc2dcaa05779b12ed08a","sha256":"10d2ce6e16ac1ad3079bb873a7ba560d22798c00732b7c3a93a088156b11ebe3","sha512":"ce9ea4fb6d7baf3690a19c6d3fdec3f425d052332ba523e06571db7d6e98236b9f5d73eb8b75190fa4230aac32c824ced975dbb660d3bb90b8c49b68fcc1c2cc","ssdeep":"3072:w2hFV7ww0eoUsWCtFRWo87Ghx9jnRFpu8yX3l0YCZEtUcQ+TDPTd:jVcYCtfWsTRFpWV0YCZEtUb+TjZ","tlshash":"f61429c9b7ca7066939365b8503f004bb17a7992f84cd8d0f082d9d82d74aaa1277f7d","size":202939,"data":"","first_seen":"2026-01-14T04:41:59.612737Z","last_seen":"2026-01-14T04:41:59.612737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"91f57c3c7a25aa7f88dcc86f38f28683","sha1":"7ada733a6cc2be8785b0f07d1ae4f12b95c9a3ae","sha256":"5b030f1df2e29e5338f9a068134a812c7e8a9610a2096623b18fc046e27c742b","sha512":"1c4ee698faad6171487e2e3733f6d7f99f43f24cd59eb5863a8a3b406247fdbcda014ed790018686544c77dc659925dc2bafc768a85ae6bae8dd3a44f43d32f2","ssdeep":"","tlshash":"45e02d371c1c0a30c32b10bc06b9e3883214202c0074c402f98e88085ee0fe8ad41ec0","size":321,"data":"","first_seen":"2026-01-09T18:46:07.391058Z","last_seen":"2026-01-14T04:41:59.68321Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"662d5658e0f8be400957658d850b977a","sha1":"1136d630f472ee127b1003d67804ea54dbaab829","sha256":"bce71a7630b32615c70be09ef4f02fcc6c34dbc00e2738657ca1fd8f7e444f75","sha512":"7e39a0e197d4cea3132103684feecc35f30dd635f28017dc3100086aef71f98c1b7ed283dfbe2ee5f8e0b0320c2566e46c6a01bed6f5c05c163ba4a117401c7c","ssdeep":"","tlshash":"26113ae7e700953400fbb3121b7d93c062be728bb965a41d38089c98a699d8b1217cbf","size":1027,"data":"","first_seen":"2026-01-09T18:46:07.347301Z","last_seen":"2026-04-14T13:21:48.649172Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f5a62886b132862ee1702d43610659f","sha1":"862bbe97a09979576ead17599c99302eb28de38c","sha256":"99d86c72663699deccca8e307d5f37572d93f4eaaa4737a899cf0fb23a63aa0e","sha512":"bd1f93fef91bea9cc82841653a130d769d9264dfad8213ff90f765d5edd836e766def08cb14cc007d599fbd6706cc18ad55d601d68de545724f520478a15e8bb","ssdeep":"","tlshash":"0ee0a31d2c1fb47117b81968f377891530d5130125461755c797d4543971cc558c5b4c","size":423,"data":"","first_seen":"2026-01-09T18:46:07.358878Z","last_seen":"2026-08-04T16:19:47.632693Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/destination","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"df33f76166dc0d7e432193e43f67f19d","sha1":"7fe4c831dda6535431ac6d7358a9d6a2ca3aff76","sha256":"ffa6900d49bfab20c3b54e5fd6f91fd9c2237b72cb2807485738aeb646428745","sha512":"95929a04927f33b66376e5027bfdc18cc7d2252654671f6e2f1933f4fc27b94699fd09e40a6c124e276b7232317fec9b82c4791c4fec0faede48698a520a2955","ssdeep":"3072:LS1xWi7vgSpRYzRcH0LuvDlWypBoPYz09RNt6Qr9J8zhodg/Ye8S36Uu0kOWTPDG:Wl74ERYNO0P3R9aSdg/YeMDLS","tlshash":"2844e7dd77d6b46683a27978403f000bb13b6d92f84cc894e182d6e92d74aa94277f7c","size":278300,"data":"","first_seen":"2026-01-09T18:46:07.182131Z","last_seen":"2026-04-14T13:21:48.581479Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/gtm.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"62ac53d68c7fc0eabfc13a5a3f7c5518","sha1":"28401a45afa280c588038acfcd01a80289e0681e","sha256":"18abda1c6bc9691949a184be5d6118f93f9459cc5b806e80db048d469ee02f46","sha512":"1eb4c6d48a670c6de2ad1cf071ec96fcb5b86c82f967ffa90a6f03a1a45a038e795ed148a744c96ffcf4c624651b747c5569ed8a19b63f53a0bdf933e79da037","ssdeep":"6144:vaewV+OiW36Ta6NJOWMYpwmFmwqhMpbxiA:de3aai5pnpt","tlshash":"bed409cdf545e47ac2a36560d83f490e727d24e2734ca890e49ac8e82d745b93163faf","size":650065,"data":"","first_seen":"2026-01-09T18:46:07.364713Z","last_seen":"2026-04-14T13:21:48.615245Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b4cf505e915a67af2a73d290dbaa3a4","sha1":"9d569af1bc77eaf16c28d35500b9cc60d79f6dde","sha256":"009d4db7eb7e15f66624bf4d23308c390442f0a5cd39831ee9f86032f5b5a278","sha512":"0671dbcf5265be47a41ee66a49cb3dfc6604b853e1757a680e797369876fa05a5f72247c7d2dcc62801ac13ff49d297742278e3a89100c03a0c698c5def07a65","ssdeep":"","tlshash":"e3f02e0b6400057d2be10047e5f7af2c71a330b95500d59242c49c1579aaebf8d5face","size":484,"data":"","first_seen":"2026-01-09T18:46:07.372994Z","last_seen":"2026-08-04T16:19:47.634833Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"679e846b6abfff1d75afc025faf06576","sha1":"11832bd3047ffef076cfcb9d6b13711829cc27a1","sha256":"6561779cafac70782489f332d6298efda90ab6bdb24f0a89efcbc0d8c38af91d","sha512":"bc28763ebf7a5a97ddaea3a8277979b48fa00f6b0e6fd7f999879eb4f0ac5f52aaf833258cfb81a40b362afa1bbac5eed7981315d0117d279d3e3d4017dd3379","ssdeep":"","tlshash":"85517a04f7cd017912fa367f481ab7c8e25d08738d0509a5fc7d86b419fda9b8531a2a","size":3031,"data":"","first_seen":"2026-01-09T18:46:07.229539Z","last_seen":"2026-08-04T16:19:47.317751Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f5a62886b132862ee1702d43610659f","sha1":"862bbe97a09979576ead17599c99302eb28de38c","sha256":"99d86c72663699deccca8e307d5f37572d93f4eaaa4737a899cf0fb23a63aa0e","sha512":"bd1f93fef91bea9cc82841653a130d769d9264dfad8213ff90f765d5edd836e766def08cb14cc007d599fbd6706cc18ad55d601d68de545724f520478a15e8bb","ssdeep":"","tlshash":"0ee0a31d2c1fb47117b81968f377891530d5130125461755c797d4543971cc558c5b4c","size":423,"data":"","first_seen":"2026-01-09T18:46:07.358878Z","last_seen":"2026-08-04T16:19:47.632693Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b4cf505e915a67af2a73d290dbaa3a4","sha1":"9d569af1bc77eaf16c28d35500b9cc60d79f6dde","sha256":"009d4db7eb7e15f66624bf4d23308c390442f0a5cd39831ee9f86032f5b5a278","sha512":"0671dbcf5265be47a41ee66a49cb3dfc6604b853e1757a680e797369876fa05a5f72247c7d2dcc62801ac13ff49d297742278e3a89100c03a0c698c5def07a65","ssdeep":"","tlshash":"e3f02e0b6400057d2be10047e5f7af2c71a330b95500d59242c49c1579aaebf8d5face","size":484,"data":"","first_seen":"2026-01-09T18:46:07.372994Z","last_seen":"2026-08-04T16:19:47.634833Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel.min.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b4d831221a14eaa81ec303f0c6bf7be","sha1":"74ba283bb7f418ff407132bed30bf6268cdbb1a8","sha256":"18c2a938a30bf80b65d47113db3f7b8a0dea2e94f04592b0ca3c2738e4c10fa2","sha512":"c60ed49ac1fb1f385f0ff39a3cd29f69fbdb30278cc5c7eb21cf770245d35a69130245e7e8383f8316966cd5750d954309d986897aaabaaedf70c50d6ff256bb","ssdeep":"768:OCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:VITMFC4dbMVRSGcgRDV","tlshash":"a0137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","size":44175,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-11T03:03:59.84901Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-N5KB3V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff24acbf40e3319d6de16e0fa5faf6a9","sha1":"96c927f9d20bd7e02e0d28121ecf183981f8f44f","sha256":"d88f3b4c44a9d0bcd6816d7286035310acfd5344ee529f1b1eabee61dfe391fa","sha512":"6c68926b5a0cf15461971d081e2a63782d5955266e61e449655ae2552ae968afc292dafaf9e3266b15fcf7e3c42496fccbd59d4c90235de352fda0e7706ce3c7","ssdeep":"6144:6mhcB85jb7pRF/SkJfU896Y4At39yrlNcNS5ydOfwZTc/MtYfY2:L15SkKhYnFdO6k42","tlshash":"d3f419cdf555a47ac2a3a560d43f494e667d14e2724cac90e08acce82e345b93163fbf","size":727375,"data":"","first_seen":"2026-01-14T04:41:59.599352Z","last_seen":"2026-01-14T04:41:59.599352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"752da3da37480614d156e7bde9f39ad6","sha1":"bab8bd866f7906ff63e98633845d3d55c05da75b","sha256":"e4b8f72b7ebef8182fce9879cb032555932f473fb65f1962a91283b0f2975b86","sha512":"48feaff54e09a6a906acc2489f5e2f0c296b04d3a088a0db8c4bff5a6ed638014e6fbb88dd15efac5a749902256fa433b321818c7316c19ac69d7185034162fd","ssdeep":"","tlshash":"28c02bb825035cb021ff0b41071f61002041333042c009200c0170852924d7710c8c50","size":130,"data":"","first_seen":"2026-01-09T18:46:07.381433Z","last_seen":"2026-08-04T16:19:47.639123Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b2c4afbdd79a9fcbcc17208d35d16d0","sha1":"f7e1ef10a25536a0c203b06b94c6fa8aeef80224","sha256":"fe44caf09dbb75755c2a5925e24a9ecfb78f5f6094d6283e492068e6fe9aeedd","sha512":"5cd25f564ec6796a55637eb0419fdf02c97fbd11dd26c4793fb00e47604a37219d68351da019d79fbfb4d17f79d5d0a25cd9caaf7c3a98452628d8c8d0150e21","ssdeep":"","tlshash":"ccc09bb826575cb152ff4b91075f65452451332086d11535080671453735d772595c54","size":130,"data":"","first_seen":"2026-01-09T18:46:07.357265Z","last_seen":"2026-08-04T16:19:47.636559Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-996198529","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7f28fa434d04a4618aa7f13d5325402","sha1":"cc62ccd2fcd90cf05d7920fb764e025398c33df6","sha256":"1a494a4e998e1f1bc7a3aca4ec0ebab3d7741efa961d28e2becd8406a9fd78e8","sha512":"3ae52b1b692beba321f4a5961e819fb54b8712b82326845fa5a125b05abd22feb9b9b4ae5827e7f9e28c325e7702ffd11de9a9f7d3c4a4e981dfde09b236e0f7","ssdeep":"6144:+f7pQF/SkJfU896Y4At3OyrlNcNS5qdO92510c:GoSkKhYnWdO+/","tlshash":"b77429cd73c6742693a3a478403f114ba17b6a91f84cc895f186dce42e74aaa4277f7c","size":345994,"data":"","first_seen":"2026-01-14T04:41:59.635063Z","last_seen":"2026-01-14T04:41:59.635063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/fbevents.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"47350d53d463c5d4bebdba86ac8650f0","sha1":"afde848a9a6d408e66f6b607d2fb7a567c3d0f12","sha256":"9ff367f1fd7a84f9d1b2a5279c69a27cf5d26fe212b691099148a2907a6cbe83","sha512":"a6d68b24d9de50c450af4e7cbee75eb821acc99a6ec59cf59ceec588128120508021e9662bad88761f2b9ea3de161dcf73d93670132709e5bb522a9db7dae3b9","ssdeep":"3072:QbLeYj8yRmJn3AI5F8NteqZEbkxrTDeMrx4x0upFEKid3McQYZ:QbLeYIWmJQ88NNv6MrPupKKid3McQ2","tlshash":"7744978575d1b09247b678ac922f4007b1bb99e6b0c8c930d99dedd43e784ed4037faa","size":268237,"data":"","first_seen":"2025-03-29T04:58:48.46543Z","last_seen":"2026-04-18T06:18:27.764084Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-996198529","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82983fc4b69de90dd36a74b47de7b090","sha1":"41190167fa9635659e8c58637d2b1c86bcd34216","sha256":"b1f51b0cb54f19aace3c50430dd443b1994cc90a729b4d468a73ea4ea2ca14e9","sha512":"db6c885d9a6c28ec3540c3d599b81f4331a672d7a9ab469cd078c67f01fb1359864e0e0bd8e940e35f3d45e1d696ef32fecc10d9cfeca891402da2a8d3eb84f3","ssdeep":"6144:if7pQF/SkJfU896Y4At3OyrlNcNS5qdO92510c:SoSkKhYnWdO+/","tlshash":"047429cd73c6742693a3a478403f114ba17b6a91f84cc895f186dce42e74aaa4277f7c","size":346004,"data":"","first_seen":"2026-01-14T04:41:59.633126Z","last_seen":"2026-01-14T04:41:59.633126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js(1)","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"811e026925556526dd2a196af520e22d","sha1":"e750dc30d2ca9fb3454f79f9d4764665db7c4e0a","sha256":"d9df88d2903699396a13a314557c6269479b670be174330c011e39b4d834e2e7","sha512":"70fa9f1c7c6ffba761ab938ffee1a0567fdd3bcd0a95f53de91ce6b3ce27b666ee812903f1edba69fd085076d79cfdb77c82f2fb2855cb3b9a4b601b0b452561","ssdeep":"3072:LS1xWi7vgSpUYbROH0LuHDlWypBoPYz09RNt6Qr9J8zhodg/Ye8S36Uu06OWTPDt:Wl74EUYly0P3R9aSdg/YemDIS","tlshash":"ef44e7dd77d6b46683a27978403f000bb13b6d92f84cc894e182d6e92d74aa94277f7c","size":278313,"data":"","first_seen":"2026-01-09T18:46:07.185543Z","last_seen":"2026-04-14T13:21:48.608743Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/mfe-loader.js","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2d9eeef1c47890d7f51917485e4d73d","sha1":"3c480cb496d76a736e36e348a614314080874103","sha256":"70a6dd218930f723d1fd85fdc264766211a8e9e6a2843e57a198dc9fa9b2591d","sha512":"8fb1ebc625c76b3fb566dc676c3ebeaec9a32113e6891742a4c138a7bf87593b94b05aa556ddfac90cb953402e3b166d1b0c1e45c05e71e91cd767615e7b49b9","ssdeep":"","tlshash":"9a519299723ff6714295105c91365010b7e84b19b90b61367aaeb8ff7298c504cbbfb4","size":3044,"data":"","first_seen":"2026-01-09T18:46:07.210682Z","last_seen":"2026-04-14T13:21:48.603683Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"662d5658e0f8be400957658d850b977a","sha1":"1136d630f472ee127b1003d67804ea54dbaab829","sha256":"bce71a7630b32615c70be09ef4f02fcc6c34dbc00e2738657ca1fd8f7e444f75","sha512":"7e39a0e197d4cea3132103684feecc35f30dd635f28017dc3100086aef71f98c1b7ed283dfbe2ee5f8e0b0320c2566e46c6a01bed6f5c05c163ba4a117401c7c","ssdeep":"","tlshash":"26113ae7e700953400fbb3121b7d93c062be728bb965a41d38089c98a699d8b1217cbf","size":1027,"data":"","first_seen":"2026-01-09T18:46:07.347301Z","last_seen":"2026-04-14T13:21:48.649172Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f.txt","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f08551e2dcd99094ddcd1e82169ffaba","sha1":"818dddb4d60e7ebd122d3562c084f2de50816ccf","sha256":"4147e57280268b27556da1456d2342e2aa9866e3f50c2af6ec847f1b15f06f6f","sha512":"4e9c2477debe2a8dcb549bc1566b39b0992e66d7ab0f16396b1d85adf90435679b6b4d02e43881dd236a879dbd40cad61d7250bce5b136ca5d16cd9cf122acd6","ssdeep":"96:Eg1BcYm9PbxGKVk54Ele/3V6oGh1fcO8pdnfX8pdnfM:EfLoh1wVg1j8pZfX8pZfM","tlshash":"05a1a49ab3a4b257d29364b1672fa60bf4397c53ccc8e404f661c8a49ca8adf1587f41","size":4827,"data":"","first_seen":"2026-01-09T18:46:07.251175Z","last_seen":"2026-04-14T13:21:48.605435Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/gtm41d9.js?id=GTM-N5KB3V","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f44142d51283b9b5bd4d606b2d58adf","sha1":"93d85d5bf83b987e77f9d14093f6e8d20de28242","sha256":"92d828e27affe7c76f77969e8c5e8733f08fd83d62100baaa1750f64202c295a","sha512":"f6d0b1ecb92a5804d883e13a1e791d455499594df4a5a2e6d15964eabfeeeba7eadbf4a0045612f6663a6e43d83376a464ceaf096e64615894534330f08cd2b2","ssdeep":"6144:vaewV+OiW36TLDNJOWMYpwmFmwqhMpbxiA:de3aLR5pnpt","tlshash":"77d409cdf545e47ac2a36560d83f490e727d24e2734ca890e49ac8e82d745b93163faf","size":650055,"data":"","first_seen":"2026-01-09T18:46:07.213678Z","last_seen":"2026-04-14T13:21:48.621701Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/contentsquare/chile/581fee82337df.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"23.45.146.217","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"39f8e572ef830571828ee96a5e1ae3cb","sha1":"01e4c89c8d0e3963dd47535aefa51329374e98aa","sha256":"7c266e05d3841883558b00451f7e7a2cb72fe7eff21b62aec4614e4403c0d8f0","sha512":"4658ce1b1b2a7857096da6ab327ed58a71b1c8f1842bc088933933edf6e2e2eb825b64667a3f16953255ebb1602617b0545f2be8f0d8dfd11c7ddae072338f7a","ssdeep":"3072:AT+rHM9jRuxbXZQeR+5y/yI3GRkrKXslqV3IMG9+:Aqrs90nQel/yI3GRkhqt","tlshash":"3b64948cf691b0754393e1b1922f010ea33f656df44a45bcb199d8e22cb984e6627f7c","size":313031,"data":"","first_seen":"2026-01-09T18:46:07.194309Z","last_seen":"2026-08-04T16:19:47.34842Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel.min(1).js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-11T16:58:46.411017Z","times_seen":67150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/w.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e31293f40e8a324de552ff593ee76a9b","sha1":"8dc5eda61e77f52f2a4f914e2a69976f9a0825e3","sha256":"6cb6821219dae9fa9a21519d86d7ec7acaf0c4dd61463eb336eb92964feebef3","sha512":"9489e63dba6b463431dcd2620aca1cab9ec6ed96534d0cd987b23ebf046dc2a7645000bce0de5ab6b8e88e31c7ce7af435eef8a6a83f3c62bac305c16cb226de","ssdeep":"96:1MKn3lQuuMxMlO0PrcjmAlDq1a+/Iq7E36A8z17iipZ8T:ui3lnuyARPYjmw25g/kgIO","tlshash":"3db1d95b3a44a26143d7206d572ff305f27211ae6859d052a315e8d47c6898fe223fef","size":5349,"data":"","first_seen":"2024-01-25T23:36:04Z","last_seen":"2026-08-09T20:16:48.3468Z","times_seen":5147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.12.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-11T15:55:29.505978Z","times_seen":84493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-script.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c8835848a59896434b221c6110e262c","sha1":"4ede6e6378a846ba79bc4a3a1ffbf858df3a48ce","sha256":"ae6f0ccb1b715f2f3451cc96383e44d3627dad3991e2e223fd4fb0afed99932d","sha512":"f7044d88d4ce3f2c96a300f475139a8ed4be0bd571ad577e1f6488f0c1bc80a616188d93d3e87324ff75f4829dca9c4a77dd62db357494d28f990b9c6cb64e69","ssdeep":"","tlshash":"ea51ee09f3f8d1b122bf769e1927ac09763a0463bc4b0a14f87d067c1fd51d95266a27","size":2503,"data":"","first_seen":"2026-01-09T18:46:07.275952Z","last_seen":"2026-08-04T16:19:47.396382Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js(2)","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a124f54d2a9a8f7526c4de7fcf74a7a","sha1":"5a88411958dfa1e8ef746616b67f6fb6ed9674d3","sha256":"5747d568377dcf56e15f7ae24bbfb1883c2bf4db7dba49f1e247b6d4ed40bb8e","sha512":"6a9c9b34c73d684bdfbf159410eee4fb265ebf78264cd3fdfd411cd6d0ce209ebda341dc303c94f4a95cb95af01d14b70529f06f526651bc4452d774554bd4a8","ssdeep":"3072:LuLKyAFfSfyYawozZw0Ina+k4K7mNFwOiHqFxUJpW7TmFmwq06Y4xmf:CWB6G9qapOWEYpAmFmwqhqf","tlshash":"e744e7dc7786b46a93936478407f000bb13b6da2f84cd894e182d5e83e74aa94277f7d","size":276642,"data":"","first_seen":"2026-01-09T18:46:07.26922Z","last_seen":"2026-04-14T13:21:48.617722Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"deb2e3acd413b20b8d4546465df8ec04","sha1":"c3f9ebd0b1430e3ce9ccf00f0688a160b07c19b4","sha256":"fd7bec769b01248ac8ed1b38219934029e6948698ab516d971f4d00fb3632940","sha512":"88d9b24d5d71d69889a667146573a976f4502c90c7f758c7dda9ab929cca39a83012019e867cdf05989e7f0d78b32bac55292d52acb272dbb972f1162775d1a6","ssdeep":"","tlshash":"17518d06fe9d23c18371002c4b3116dab6b9a5f39e5096aadc7772d06b84f082b0d958","size":2527,"data":"","first_seen":"2024-03-25T01:04:26Z","last_seen":"2026-04-14T13:21:48.653762Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"752da3da37480614d156e7bde9f39ad6","sha1":"bab8bd866f7906ff63e98633845d3d55c05da75b","sha256":"e4b8f72b7ebef8182fce9879cb032555932f473fb65f1962a91283b0f2975b86","sha512":"48feaff54e09a6a906acc2489f5e2f0c296b04d3a088a0db8c4bff5a6ed638014e6fbb88dd15efac5a749902256fa433b321818c7316c19ac69d7185034162fd","ssdeep":"","tlshash":"28c02bb825035cb021ff0b41071f61002041333042c009200c0170852924d7710c8c50","size":130,"data":"","first_seen":"2026-01-09T18:46:07.381433Z","last_seen":"2026-08-04T16:19:47.639123Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b2c4afbdd79a9fcbcc17208d35d16d0","sha1":"f7e1ef10a25536a0c203b06b94c6fa8aeef80224","sha256":"fe44caf09dbb75755c2a5925e24a9ecfb78f5f6094d6283e492068e6fe9aeedd","sha512":"5cd25f564ec6796a55637eb0419fdf02c97fbd11dd26c4793fb00e47604a37219d68351da019d79fbfb4d17f79d5d0a25cd9caaf7c3a98452628d8c8d0150e21","ssdeep":"","tlshash":"ccc09bb826575cb152ff4b91075f65452451332086d11535080671453735d772595c54","size":130,"data":"","first_seen":"2026-01-09T18:46:07.357265Z","last_seen":"2026-08-04T16:19:47.636559Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/jquery-3.7.1.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285314,"data":"","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-08-11T14:39:56.208753Z","times_seen":18017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d10lpsik1i8c69.cloudfront.net/w.js","fqdn":"d10lpsik1i8c69.cloudfront.net","domain":"d10lpsik1i8c69.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.195","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e31293f40e8a324de552ff593ee76a9b","sha1":"8dc5eda61e77f52f2a4f914e2a69976f9a0825e3","sha256":"6cb6821219dae9fa9a21519d86d7ec7acaf0c4dd61463eb336eb92964feebef3","sha512":"9489e63dba6b463431dcd2620aca1cab9ec6ed96534d0cd987b23ebf046dc2a7645000bce0de5ab6b8e88e31c7ce7af435eef8a6a83f3c62bac305c16cb226de","ssdeep":"96:1MKn3lQuuMxMlO0PrcjmAlDq1a+/Iq7E36A8z17iipZ8T:ui3lnuyARPYjmw25g/kgIO","tlshash":"3db1d95b3a44a26143d7206d572ff305f27211ae6859d052a315e8d47c6898fe223fef","size":5349,"data":"","first_seen":"2024-01-25T23:36:04Z","last_seen":"2026-08-09T20:16:48.3468Z","times_seen":5147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/static/service_worker/53k0/sw_iframe.html?origin=https%3A%2F%2Fwww.scotiabankchile.cl","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"92efef28536434a9c57cccfbda736008","sha1":"13eec13e1dfbc786430f8cb24e41ea4113ee8c42","sha256":"9a59e20c020ec0a67f0d188d30b75ee3c381a84be044993c3bca57e38f5b1322","sha512":"d78dd5130b0011871b6e98a498786c5c49909c795d9b64f1aa1dcd5e7fa44effeb86d132d2ddc6537a33df9f7a290da80a1e691d782e2495e339ceafba6d83f1","ssdeep":"","tlshash":"ec61c78c7651f46502a2a5f3921f3902b0a91564f00ef0ecb1799cd1bbb5d5b03a2fbc","size":3345,"data":"","first_seen":"2025-03-03T17:25:30.806797Z","last_seen":"2026-05-25T22:02:06.272701Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-874209459","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3e8ea4c77dd5c8cb82d636ae8043682","sha1":"8cc7f827427a30edf946c9fcf56c306cf0dd97a6","sha256":"3f6e45195d7121bf551e3d9f8b7df87496b8c2ce5c82ec7ea5905000bb1b65b1","sha512":"d4cf86ba899146a5475bd2053635149e24a24fdeb5920cf6245fc331e6aa90146d0a6ce0e6e8b5954628113bbb946452dcd58d16972e0802796cf0c9f82d4f94","ssdeep":"6144:gf7pQF/SkJfU896Y4At3OyrlNcNS5qdO92510c:YoSkKhYnWdO+/","tlshash":"e67429cd73c6742693a3a478403f114ba17b6a91f84cc895f186dce42e74aaa4277f7c","size":345994,"data":"","first_seen":"2026-01-14T04:41:59.608906Z","last_seen":"2026-01-14T04:41:59.608906Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6EDD061F8G\u0026l=dataLayer\u0026cx=c\u0026gtm=45He53q1v6340201za204\u0026tag_exp=102482433~102788824~102803279~102813109~102887800~102926062~102975948","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b535e4afd59a008b89a57bfcad1273d3","sha1":"ba0fb7b907c78d1bb2d57db46a9733cee5be81a8","sha256":"1c5d3c997198c5c722672f2740824f3a2419cd4ac4b35a5fdaf3e906b13efd5a","sha512":"7872f189cbf6cf760c45e3e3fa236799d8cc3d6133db1af3601678026713e83aa852e92716aa0e4fea610ae5b9a849f5f2825a52db52d7514910d8f701d7bfec","ssdeep":"6144:PLk0QZv3l8xwWY2sHK8RwrCO4HD1Iy2ofUIDYdN+Ma+K:grj8xgZK6wQfUc","tlshash":"81b4089f73c5642692daf468502f02cba87b25a2b49cc8a7b1d9ccf02d3459a0167f7d","size":521495,"data":"","first_seen":"2026-01-14T04:41:59.649732Z","last_seen":"2026-01-14T04:41:59.649732Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-874209459","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3e8ea4c77dd5c8cb82d636ae8043682","sha1":"8cc7f827427a30edf946c9fcf56c306cf0dd97a6","sha256":"3f6e45195d7121bf551e3d9f8b7df87496b8c2ce5c82ec7ea5905000bb1b65b1","sha512":"d4cf86ba899146a5475bd2053635149e24a24fdeb5920cf6245fc331e6aa90146d0a6ce0e6e8b5954628113bbb946452dcd58d16972e0802796cf0c9f82d4f94","ssdeep":"6144:gf7pQF/SkJfU896Y4At3OyrlNcNS5qdO92510c:YoSkKhYnWdO+/","tlshash":"e67429cd73c6742693a3a478403f114ba17b6a91f84cc895f186dce42e74aaa4277f7c","size":345994,"data":"","first_seen":"2026-01-14T04:41:59.608906Z","last_seen":"2026-01-14T04:41:59.608906Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/contentsquare/chile/581fee82337df.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"23.45.146.217","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"39f8e572ef830571828ee96a5e1ae3cb","sha1":"01e4c89c8d0e3963dd47535aefa51329374e98aa","sha256":"7c266e05d3841883558b00451f7e7a2cb72fe7eff21b62aec4614e4403c0d8f0","sha512":"4658ce1b1b2a7857096da6ab327ed58a71b1c8f1842bc088933933edf6e2e2eb825b64667a3f16953255ebb1602617b0545f2be8f0d8dfd11c7ddae072338f7a","ssdeep":"3072:AT+rHM9jRuxbXZQeR+5y/yI3GRkrKXslqV3IMG9+:Aqrs90nQel/yI3GRkhqt","tlshash":"3b64948cf691b0754393e1b1922f010ea33f656df44a45bcb199d8e22cb984e6627f7c","size":313031,"data":"","first_seen":"2026-01-09T18:46:07.194309Z","last_seen":"2026-08-04T16:19:47.34842Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/medallia-digital-embed.js","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/medallia-digital-embed.js HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:01 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1945\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1945,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (721)","md5":"9420367f57781b06728e3dbf986efa61","sha1":"2670530b6796c3339d4f0bd49a81e6b488bfad37","sha256":"8e52a06b4200155d40de3db175901aea38b21ca7729c80757054fdabff7e45ce","sha512":"57ab9cb50b7a78bada6d14850f00828015c0597a63603ced5cf9a2a92e10e81c2d9aa4db90a3e4638f37c1424aa934df59b9c2779866f8fe62f8b03f0cf7dce1","ssdeep":"","tlshash":"0941fefa7f99e4115257256b2b9be709252b60d71c44d2c195b8ca90b031a4fdd2fcc8","first_seen":"2026-01-09T18:46:07.25957Z","last_seen":"2026-04-14T13:21:48.611857Z","times_seen":14,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/font-awesome.min.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/font-awesome.min.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 31000\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-11T17:44:07.900994Z","times_seen":307793,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":442,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel.min(1).js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel.min(1).js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 44342\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-11T16:58:46.411017Z","times_seen":67150,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":440,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/contentsquare/chile/581fee82337df.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"23.45.146.217","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 13 May 2025 00:00:00 GMT","end":"Tue, 12 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:A2:DE:42:73:6E:57:47:10:09:C7:77:54:E8:17:69:47:47:CF:E0","sha256":"28:9B:16:04:EB:53:DA:C8:CA:61:21:5E:76:0F:F3:49:63:3F:A8:62:0F:82:1C:BE:67:E0:21:08:E2:12:9C:F1"}}},"request":{"raw":"GET /contentsquare/chile/581fee82337df.js HTTP/1.1\r\nHost: dmtags.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: application/x-javascript\r\nETag: \"691b45b9-4c6c7\"\r\nLast-Modified: Mon, 17 Nov 2025 15:56:41 GMT\r\nx-vcap-request-id: 7699ab6b-1e22-4457-588e-30eddfd0e71e\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\nContent-Length: 83823\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scotiabank.com\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns ;\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: private\r\nVary: Accept-Encoding, origin\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313031,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (63711)","md5":"39f8e572ef830571828ee96a5e1ae3cb","sha1":"01e4c89c8d0e3963dd47535aefa51329374e98aa","sha256":"7c266e05d3841883558b00451f7e7a2cb72fe7eff21b62aec4614e4403c0d8f0","sha512":"4658ce1b1b2a7857096da6ab327ed58a71b1c8f1842bc088933933edf6e2e2eb825b64667a3f16953255ebb1602617b0545f2be8f0d8dfd11c7ddae072338f7a","ssdeep":"3072:AT+rHM9jRuxbXZQeR+5y/yI3GRkrKXslqV3IMG9+:Aqrs90nQel/yI3GRkhqt","tlshash":"3b64948cf691b0754393e1b1922f010ea33f656df44a45bcb199d8e22cb984e6627f7c","first_seen":"2026-01-09T18:46:07.194309Z","last_seen":"2026-08-04T16:19:47.34842Z","times_seen":16,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":91,"dns":61,"connect":2,"send":0,"wait":12,"receive":3,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-N5KB3V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtm.js?id=GTM-N5KB3V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\nexpires: Wed, 14 Jan 2026 04:41:04 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 14 Jan 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 179948\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":727375,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65289)","md5":"ff24acbf40e3319d6de16e0fa5faf6a9","sha1":"96c927f9d20bd7e02e0d28121ecf183981f8f44f","sha256":"d88f3b4c44a9d0bcd6816d7286035310acfd5344ee529f1b1eabee61dfe391fa","sha512":"6c68926b5a0cf15461971d081e2a63782d5955266e61e449655ae2552ae968afc292dafaf9e3266b15fcf7e3c42496fccbd59d4c90235de352fda0e7706ce3c7","ssdeep":"6144:6mhcB85jb7pRF/SkJfU896Y4At39yrlNcNS5ydOfwZTc/MtYfY2:L15SkKhYnFdO6k42","tlshash":"d3f419cdf555a47ac2a3a560d43f494e667d14e2724cac90e08acce82e345b93163fbf","first_seen":"2026-01-14T04:41:59.599352Z","last_seen":"2026-01-14T04:41:59.599352Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.aglty.io/scotiabank-chile/librerias/canvas-framework/new-fonts/assets/fonts/Scotia_W_Headline.woff","fqdn":"cdn.aglty.io","domain":"aglty.io","tld":"io"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aglty.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 12:18:14 GMT","end":"Wed, 25 Mar 2026 12:18:13 GMT"},"fingerprint":{"sha1":"FE:FF:2C:93:FF:40:6D:EA:C7:D8:73:C1:3D:5E:D5:69:37:0E:D0:AB","sha256":"EF:36:88:75:D2:E5:2A:A6:F7:71:9D:C9:82:DA:37:76:E8:C3:74:74:F2:03:43:1A:6A:2C:31:18:03:18:A4:C1"}}},"request":{"raw":"GET /scotiabank-chile/librerias/canvas-framework/new-fonts/assets/fonts/Scotia_W_Headline.woff HTTP/1.1\r\nHost: cdn.aglty.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.aglty.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-aspnetmvc-version: 5.2\r\naccess-control-allow-origin: *\r\nx-frame-options: SELF\r\nrequest-context: appId=cid-v1:b6356dc1-e87f-411b-9bf6-6a5f0308e7de\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=604800, s-maxage=604800\r\naccess-control-expose-headers: Request-Context\r\ncontent-security-policy: default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline' *; object-src 'none';\r\ncontent-type: application/font-woff\r\nx-ms-blob-cache-control: public, max-age=604800, s-maxage=604800\r\nlast-modified: Thu, 06 Feb 2025 02:27:00 GMT\r\nexpires: Thu, 04 Dec 2025 20:52:24 GMT\r\nserver: Microsoft-IIS/10.0\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 571556\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\nx-served-by: cache-chi-kigq8000175-CHI, cache-chi-kigq8000175-CHI, cache-hel1410032-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 108, 0\r\nx-timer: S1768365665.741393,VS0,VE1\r\nvary: Accept\r\nguid: scotiabank-chile\r\nregion: usa\r\nbackend: ssl_shield_chi_il_us\r\nurl: /scotiabank-chile/librerias/canvas-framework/new-fonts/assets/fonts/Scotia_W_Headline.woff\r\ncontent-length: 15280\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":15280,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 15280, version 1.0","md5":"030ed80bd7a8a10e687f26de5976b8b9","sha1":"2ff9e05cf5d7cf05e31d69c33f12ba93f7d687d1","sha256":"877b3784517bcd06618ed594e1bc7fad996065f92c5bd0caa2f5fdfa24f3bc6a","sha512":"853fba066844dc406dc5e65d33b4219a30bde982e1cb79fbd09db28de2aba46115adc0f7c422f3a8d503ccee1dd8af43cec31b374cee691cd8fb4198a5d98d54","ssdeep":"384:Iy+d1ujGtjWByieQJTGyYgX1ExIptmcBhDwbq+SM7c74InhotQ:JjijyyipTNYgCqptmwuzSMQc+Wi","tlshash":"4e62d169696c6389d1af633684571b44472d1d30b1f1427d98fb26230b65cf2e8abf83","first_seen":"2023-05-08T12:23:11Z","last_seen":"2026-08-04T16:19:47.437147Z","times_seen":44,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/saved_resource.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/saved_resource.html HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:04 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (312)","md5":"e18e1772e6da9d5c416aa7ff66071c60","sha1":"03346c429b70c5afa904273d8925e54c05522e01","sha256":"ce0428e3769247c92cb99f8b3134a323f27382b22d73c570ff9f6dc116a277c5","sha512":"e310f90e1cc4d567ff8b6ef422e784d1939cbf22cbc6c7930b180a13999d3174c1bfcbabee946b6b763c92ec71d93d6c4bc9665faa013fbe545ae11daa6e9a8d","ssdeep":"","tlshash":"7be0c0f39205510ad412d142d5f5f31848038406b1118ce189f03aac31ce31bd47376c","first_seen":"2026-01-09T18:46:07.263894Z","last_seen":"2026-04-14T13:21:48.587574Z","times_seen":14,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fixed.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fixed.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:01 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 142\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"43cfcc85c4bbd16693fdf00595f28f39","sha1":"9078ab2ccc25f85c4603611c89ad9db35acc292c","sha256":"c374a35b9a752a34b05f78a0bb538b23e85e3eaf14a205d2f8c7bae84a230e16","sha512":"2aee68c2f5aa8fb31f751c0edfd1ce833214dbccde44eb689448fd456c2354af7eb6914b5d3a0d986398332a298034413e2b6e9a2765887e6ab03f3e4dc7c26d","ssdeep":"","tlshash":"99c02b0d8fc402a4225040de8c5cf40da54c6c3f93cded1cbf518305cb702160433508","first_seen":"2026-01-09T18:46:07.278718Z","last_seen":"2026-04-14T13:21:48.648431Z","times_seen":14,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/mfe-loader.js","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/mfe-loader.js HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:01 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3044\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3044,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3044), with no line terminators","md5":"c2d9eeef1c47890d7f51917485e4d73d","sha1":"3c480cb496d76a736e36e348a614314080874103","sha256":"70a6dd218930f723d1fd85fdc264766211a8e9e6a2843e57a198dc9fa9b2591d","sha512":"8fb1ebc625c76b3fb566dc676c3ebeaec9a32113e6891742a4c138a7bf87593b94b05aa556ddfac90cb953402e3b166d1b0c1e45c05e71e91cd767615e7b49b9","ssdeep":"","tlshash":"9a519299723ff6714295105c91365010b7e84b19b90b61367aaeb8ff7298c504cbbfb4","first_seen":"2026-01-09T18:46:07.210682Z","last_seen":"2026-04-14T13:21:48.603683Z","times_seen":14,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":142,"dns":1,"connect":71,"send":0,"wait":78,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-animate.min.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-animate.min.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 71583\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":71583,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65515)","md5":"8b60690e6e7c847fc763fd7130dba681","sha1":"2ecf14fff00f404d359dc5948565288619be2e21","sha256":"81b6e456b0bfdd3f9ac8c64eeda15230afd0d998e403f40906a8b8804bafea1d","sha512":"36f73a09949d2ff2dfbac20f41d6def4e910471a0fa049ece06b39da522648e2b80ca909b797d95c21a5246c21f0c15ca3af91bf6871e1790e6b28184e89c249","ssdeep":"1536:T6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:+kZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"856329ae4891128990230f6787cd5ea84b3dc6a315721cee33552c4b8b46fee73de617","first_seen":"2025-11-06T03:03:06.372251Z","last_seen":"2026-08-04T16:19:47.545153Z","times_seen":17,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":398,"dns":0,"connect":0,"send":0,"wait":75,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f(1).txt","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f(1).txt HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4847\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/plain\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4847,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (4847), with no line terminators","md5":"8331463e4349e9a8501d5c8d3a8f6fae","sha1":"20970f6880fd38c279559e33d5e37f85f943c783","sha256":"bb4e49163d5265d9c3f31e4df2b399ba69b2185a1de999d35edb2a9b5ffba5d9","sha512":"368b0a22b9b4e73f5a9e452eb07f8c659c374a09f3ad514af3377f2485bd94886a6953a6a779936f366597783130c3ed5a8b4e30303be337878fc8dab38831df","ssdeep":"96:Eg1BcYm9PbxGKVk54Ele/3V6oGh1fclCM2nS5CM2nSa:EfLoh1wVg1UCM0S5CM0Sa","tlshash":"7ca1a49ab3a1b153d2a264b1672f650bf4397d63cccce410f661c8949cacadf209bf40","first_seen":"2026-01-09T18:46:07.29982Z","last_seen":"2026-04-14T13:21:48.641206Z","times_seen":14,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":538,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.aglty.io/scotiabank-chile/fonts/font-face/web-font-2024/scotia-fonts-2024.css","fqdn":"cdn.aglty.io","domain":"aglty.io","tld":"io"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:03.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aglty.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 12:18:14 GMT","end":"Wed, 25 Mar 2026 12:18:13 GMT"},"fingerprint":{"sha1":"FE:FF:2C:93:FF:40:6D:EA:C7:D8:73:C1:3D:5E:D5:69:37:0E:D0:AB","sha256":"EF:36:88:75:D2:E5:2A:A6:F7:71:9D:C9:82:DA:37:76:E8:C3:74:74:F2:03:43:1A:6A:2C:31:18:03:18:A4:C1"}}},"request":{"raw":"GET /scotiabank-chile/fonts/font-face/web-font-2024/scotia-fonts-2024.css HTTP/1.1\r\nHost: cdn.aglty.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: Microsoft-IIS/10.0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Request-Context\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nexpires: Fri, 14 Feb 2025 01:59:26 GMT\r\nlast-modified: Thu, 06 Feb 2025 16:04:12 GMT\r\nx-aspnetmvc-version: 5.2\r\nx-ms-blob-cache-control: public, max-age=604800, s-maxage=604800\r\nrequest-context: appId=cid-v1:b6356dc1-e87f-411b-9bf6-6a5f0308e7de\r\ncontent-security-policy: default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline' *; object-src 'none';\r\nx-frame-options: SELF\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 14 Jan 2026 04:41:03 GMT\r\nage: 493258\r\nx-served-by: cache-chi-klot8100113-CHI, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2218, 1\r\nx-timer: S1768365663.377173,VS0,VE1\r\nvary: Accept\r\nguid: scotiabank-chile\r\nregion: usa\r\nbackend: ssl_shield_chi_il_us\r\nurl: /scotiabank-chile/fonts/font-face/web-font-2024/scotia-fonts-2024.css\r\ncontent-length: 397\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":5999,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"85af2c58f4b558678b44e1d526ca5476","sha1":"a5302a79e0e4e5f3a523d78b42c298da97e4fef1","sha256":"3dc55069b647bb9d0c712f71e2ea3ebf471bfdb921b8bdc82db45e361528fa2d","sha512":"7c6dc9c33ecec960a19a39087741d6d5a5c2c4ad9106d378a1bca842bf9ca75739221fd8df63b38aeeaf4c79742fb69f5449b3a9840b932a5284f58f77abbacc","ssdeep":"96:KknOk1LkaZkpLktHkuWkDEkleluk2U2Jk2f23k232zk292Ck272fk2w24k2T2ykC:Lnn1gaapgtEuPDxo9ZP2TwD2+wHDQE4C","tlshash":"30c1b09278d7a74072730c8f739b2a548fcb60163c944e55b9ae6989dfe33745302b1e","first_seen":"2026-01-09T18:46:07.243991Z","last_seen":"2026-08-04T16:19:47.413153Z","times_seen":17,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/contentsquare/chile/581fee82337df.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"23.45.146.217","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 13 May 2025 00:00:00 GMT","end":"Tue, 12 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:A2:DE:42:73:6E:57:47:10:09:C7:77:54:E8:17:69:47:47:CF:E0","sha256":"28:9B:16:04:EB:53:DA:C8:CA:61:21:5E:76:0F:F3:49:63:3F:A8:62:0F:82:1C:BE:67:E0:21:08:E2:12:9C:F1"}}},"request":{"raw":"GET /contentsquare/chile/581fee82337df.js HTTP/1.1\r\nHost: dmtags.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: application/x-javascript\r\nETag: \"691b45b9-4c6c7\"\r\nLast-Modified: Mon, 17 Nov 2025 15:56:41 GMT\r\nx-vcap-request-id: 7699ab6b-1e22-4457-588e-30eddfd0e71e\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\nContent-Length: 83823\r\nDate: Wed, 14 Jan 2026 04:41:04 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scotiabank.com\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns ;\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: private\r\nVary: Accept-Encoding, origin\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313031,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (63711)","md5":"39f8e572ef830571828ee96a5e1ae3cb","sha1":"01e4c89c8d0e3963dd47535aefa51329374e98aa","sha256":"7c266e05d3841883558b00451f7e7a2cb72fe7eff21b62aec4614e4403c0d8f0","sha512":"4658ce1b1b2a7857096da6ab327ed58a71b1c8f1842bc088933933edf6e2e2eb825b64667a3f16953255ebb1602617b0545f2be8f0d8dfd11c7ddae072338f7a","ssdeep":"3072:AT+rHM9jRuxbXZQeR+5y/yI3GRkrKXslqV3IMG9+:Aqrs90nQel/yI3GRkhqt","tlshash":"3b64948cf691b0754393e1b1922f010ea33f656df44a45bcb199d8e22cb984e6627f7c","first_seen":"2026-01-09T18:46:07.194309Z","last_seen":"2026-08-04T16:19:47.34842Z","times_seen":16,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d10lpsik1i8c69.cloudfront.net/w.js","fqdn":"d10lpsik1i8c69.cloudfront.net","domain":"d10lpsik1i8c69.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.195","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /w.js HTTP/1.1\r\nHost: d10lpsik1i8c69.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Jan 2024 18:19:40 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Wed, 14 Jan 2026 03:43:19 GMT\r\ncache-control: max-age=3600\r\netag: W/\"e31293f40e8a324de552ff593ee76a9b\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: UdV7qwmcIgqe2cQ-lO2dcjBLig5tTq5WFrhH-GsRpxhO9CPXzn5plA==\r\nage: 3494\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5349,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5349), with no line terminators","md5":"e31293f40e8a324de552ff593ee76a9b","sha1":"8dc5eda61e77f52f2a4f914e2a69976f9a0825e3","sha256":"6cb6821219dae9fa9a21519d86d7ec7acaf0c4dd61463eb336eb92964feebef3","sha512":"9489e63dba6b463431dcd2620aca1cab9ec6ed96534d0cd987b23ebf046dc2a7645000bce0de5ab6b8e88e31c7ce7af435eef8a6a83f3c62bac305c16cb226de","ssdeep":"96:1MKn3lQuuMxMlO0PrcjmAlDq1a+/Iq7E36A8z17iipZ8T:ui3lnuyARPYjmw25g/kgIO","tlshash":"3db1d95b3a44a26143d7206d572ff305f27211ae6859d052a315e8d47c6898fe223fef","first_seen":"2024-01-25T23:36:04Z","last_seen":"2026-08-09T20:16:48.3468Z","times_seen":5147,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":10,"dns":36,"connect":1,"send":0,"wait":1,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:22.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"POST /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 26\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"getstyle=98979.94909316977"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:21 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"a3ccc056ccd800499a1fc3a0fe8fddd8","sha1":"bb8b82670c733f151a84360dc6e88e390d337ac9","sha256":"bd9ffb3e93ae7e538c1148cf835d6a8c51837974348fdb1215482f5dbe599604","sha512":"d6e3d3982845967f586bfa0207b00070368a106bdf7e21b3021f384cb1dbc60f7826bf70bd528240a7e81779ccdd46915e22337f86f46e01294db2e7e0f2e265","ssdeep":"","tlshash":"a5a002981556f0012a2f8960dfa015c10e906d151d5b64c0d57bd30e667c5255aeb091","first_seen":"2026-01-09T18:46:07.200295Z","last_seen":"2026-04-14T13:21:48.595408Z","times_seen":14,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/main.88098fe2.chunk.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/main.88098fe2.chunk.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:01 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:43:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 260824\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":260824,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8249f365371e648f866d221f3d9210fd","sha1":"91b689d82997dd0d6b86c09b4f6fdbd08c52e3bf","sha256":"29437ac957ec27f67c95ce3a0c5fa0a6e29033d11ac38a35c5c14f895375e853","sha512":"2d0d7da64ecb9eebe0e80339419e28fb2e4b51d9199d8ffa78c1c392720e88465d6ceeec9046827aee052c850491da72fa33de53829d4f0bc268ed525395d273","ssdeep":"1536:nrXk51r9Jm3HTCr+sAgOwQIe/bY3YOYWYFYDKSXqGG5wsnd1YKxuoHPvBasaN1Xf:yA/Ie/0KH5Fd8oHIsaN1GgsSK4","tlshash":"0f4470a1ea4901dcb736c823e390774cac55f461cee28d53f40b963c8ae6356479ab7c","first_seen":"2026-01-09T18:46:07.297093Z","last_seen":"2026-04-14T13:21:48.640391Z","times_seen":14,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":144,"dns":1,"connect":77,"send":0,"wait":81,"receive":297,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/iconos-ilustartivos-canvas.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:03.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/iconos-ilustartivos-canvas.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-874209459","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=AW-874209459 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\nexpires: Wed, 14 Jan 2026 04:41:04 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 14 Jan 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 121445\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345994,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"c3e8ea4c77dd5c8cb82d636ae8043682","sha1":"8cc7f827427a30edf946c9fcf56c306cf0dd97a6","sha256":"3f6e45195d7121bf551e3d9f8b7df87496b8c2ce5c82ec7ea5905000bb1b65b1","sha512":"d4cf86ba899146a5475bd2053635149e24a24fdeb5920cf6245fc331e6aa90146d0a6ce0e6e8b5954628113bbb946452dcd58d16972e0802796cf0c9f82d4f94","ssdeep":"6144:gf7pQF/SkJfU896Y4At3OyrlNcNS5qdO92510c:YoSkKhYnWdO+/","tlshash":"e67429cd73c6742693a3a478403f114ba17b6a91f84cc895f186dce42e74aaa4277f7c","first_seen":"2026-01-14T04:41:59.608906Z","last_seen":"2026-01-14T04:41:59.608906Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dr=kbrmimarlik.com\u0026dl=https%3A%2F%2Fkbrmimarlik.com%2Freactivar%2Freactivarscotiapassenlinea%2FSCOTIAPASSEMPRESASREACTIVA%2F\u0026scrsrc=kbrmimarlik.com\u0026frm=1\u0026rnd=244392042.1768365664\u0026dt=Login%20Empresas\u0026auid=801329264.1768365663\u0026navt=n\u0026npa=0\u0026gtm=45He53q1h1v6340201za204\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102015666~102482433~102509682~102788824~102803279~102813109~102887800~102926062\u0026tft=1768365664164\u0026tfd=1511\u0026apve=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dr=kbrmimarlik.com\u0026dl=https%3A%2F%2Fkbrmimarlik.com%2Freactivar%2Freactivarscotiapassenlinea%2FSCOTIAPASSEMPRESASREACTIVA%2F\u0026scrsrc=kbrmimarlik.com\u0026frm=1\u0026rnd=244392042.1768365664\u0026dt=Login%20Empresas\u0026auid=801329264.1768365663\u0026navt=n\u0026npa=0\u0026gtm=45He53q1h1v6340201za204\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102015666~102482433~102509682~102788824~102803279~102813109~102887800~102926062\u0026tft=1768365664164\u0026tfd=1511\u0026apve=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://kbrmimarlik.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/saved_resource(1).html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/saved_resource(1).html HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:04 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 149\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":149,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3c2ccda97c47ede0b1c91b11efd575ea","sha1":"0a348c4b61c961aba7618f909beb87f740a81983","sha256":"97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50","sha512":"31afbe911abfda33a2948d14578ba290b604920983118ca5a6268a9906120ef365416e5e776ea685d648eef7a2ee2245f424829fdd4c7150d944f4bf673aee28","ssdeep":"","tlshash":"50c08cb52412200ba220aaa2dadde56408408010a04a8c82a04039ac65cc35ce8a3690","first_seen":"2023-03-10T00:19:37Z","last_seen":"2026-08-09T00:06:45.134801Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-user-list/996198529/?random=1743438280076\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0za200\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102509683~102788824~102803279~102813109~102887800~102926062\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzMh_69ylu_NbcyJ9QNtxf8C-koWaaFuA4bPFc2FhPCaFJJCMQ1\u0026random=2627689808\u0026rmt_tld=0\u0026ipr=y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /pagead/1p-user-list/996198529/?random=1743438280076\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0za200\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102509683~102788824~102803279~102813109~102887800~102926062\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzMh_69ylu_NbcyJ9QNtxf8C-koWaaFuA4bPFc2FhPCaFJJCMQ1\u0026random=2627689808\u0026rmt_tld=0\u0026ipr=y HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 14 Jan 2026 04:41:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T17:57:46.856117Z","times_seen":1027477,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/index.htmlstatic/media/logo-footer.7b77b60b.svg","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/index.htmlstatic/media/logo-footer.7b77b60b.svg HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":1111,"timings":{"blocked":1032,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/gtm41d9.js?id=GTM-N5KB3V","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/gtm41d9.js?id=GTM-N5KB3V HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:01 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 16:00:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 650055\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":650055,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65289)","md5":"1f44142d51283b9b5bd4d606b2d58adf","sha1":"93d85d5bf83b987e77f9d14093f6e8d20de28242","sha256":"92d828e27affe7c76f77969e8c5e8733f08fd83d62100baaa1750f64202c295a","sha512":"f6d0b1ecb92a5804d883e13a1e791d455499594df4a5a2e6d15964eabfeeeba7eadbf4a0045612f6663a6e43d83376a464ceaf096e64615894534330f08cd2b2","ssdeep":"6144:vaewV+OiW36TLDNJOWMYpwmFmwqhMpbxiA:de3aLR5pnpt","tlshash":"77d409cdf545e47ac2a36560d83f490e727d24e2734ca890e49ac8e82d745b93163faf","first_seen":"2026-01-09T18:46:07.213678Z","last_seen":"2026-04-14T13:21:48.621701Z","times_seen":14,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":147,"dns":1,"connect":76,"send":0,"wait":80,"receive":371,"ssl":88},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-canvas.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-canvas.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 85188\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":85188,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a41021e8e51767f64876e0b8acaaa01b","sha1":"49a67141583ea0baf452e8d21055df222dce0a6e","sha256":"921cebae034f0c16c204d55aaf7678233a2f8f11e10d48c9f38edf1fa3ecb26b","sha512":"8cd82b70a61988e396e7e2763e828f7ac31fb10335cd958f8cb177904a3320c63f88e934695b5a8e9630e771970edf329e580e3ce19e7797b95e9619279036f2","ssdeep":"768:38Ysd9PqVY6dm2RB7esFuW3pKxDAlEzzTPGcg0FRFjOg:Lsd9Pud7EW3psAl+fPe0nlOg","tlshash":"bb83f4497ef6180475aba5a5c0bafad0f31c8047dd0fdd9eb9e13064ef092d4ac96e09","first_seen":"2026-01-09T18:46:07.293627Z","last_seen":"2026-04-14T13:21:48.599628Z","times_seen":14,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":395,"dns":0,"connect":0,"send":0,"wait":77,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-874209459","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=AW-874209459 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Jan 2026 04:41:03 GMT\r\nexpires: Wed, 14 Jan 2026 04:41:03 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 14 Jan 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 121445\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345994,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"c3e8ea4c77dd5c8cb82d636ae8043682","sha1":"8cc7f827427a30edf946c9fcf56c306cf0dd97a6","sha256":"3f6e45195d7121bf551e3d9f8b7df87496b8c2ce5c82ec7ea5905000bb1b65b1","sha512":"d4cf86ba899146a5475bd2053635149e24a24fdeb5920cf6245fc331e6aa90146d0a6ce0e6e8b5954628113bbb946452dcd58d16972e0802796cf0c9f82d4f94","ssdeep":"6144:gf7pQF/SkJfU896Y4At3OyrlNcNS5qdO92510c:YoSkKhYnWdO+/","tlshash":"e67429cd73c6742693a3a478403f114ba17b6a91f84cc895f186dce42e74aaa4277f7c","first_seen":"2026-01-14T04:41:59.608906Z","last_seen":"2026-01-14T04:41:59.608906Z","times_seen":1,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":289,"dns":1,"connect":28,"send":0,"wait":29,"receive":21,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=siloed_AW-1046484911\u0026cx=c\u0026gtm=4e61d0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/destination?id=siloed_AW-1046484911\u0026cx=c\u0026gtm=4e61d0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Jan 2026 04:41:03 GMT\r\nexpires: Wed, 14 Jan 2026 04:41:03 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 14 Jan 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 75299\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202939,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3699)","md5":"96840620c4a89eed184dce593aadb920","sha1":"d2298e97cb42167bee80dc2dcaa05779b12ed08a","sha256":"10d2ce6e16ac1ad3079bb873a7ba560d22798c00732b7c3a93a088156b11ebe3","sha512":"ce9ea4fb6d7baf3690a19c6d3fdec3f425d052332ba523e06571db7d6e98236b9f5d73eb8b75190fa4230aac32c824ced975dbb660d3bb90b8c49b68fcc1c2cc","ssdeep":"3072:w2hFV7ww0eoUsWCtFRWo87Ghx9jnRFpu8yX3l0YCZEtUcQ+TDPTd:jVcYCtfWsTRFpWV0YCZEtUb+TjZ","tlshash":"f61429c9b7ca7066939365b8503f004bb17a7992f84cd8d0f082d9d82d74aaa1277f7d","first_seen":"2026-01-14T04:41:59.612737Z","last_seen":"2026-01-14T04:41:59.612737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/wdcusprem/129691/onsite/generic1713461583872.js","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:05.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /wdcusprem/129691/onsite/generic1713461583872.js HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:04 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/lazysizes.min.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/lazysizes.min.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7771\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7771,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7744)","md5":"b80e49640d4794d4333d00db76ea22f7","sha1":"72ced7e7e78ccb760c4050d7ee12d86c38671756","sha256":"fb649fcae62177dfe63e67081ddceb830b5ce1f05a4184e9bbb7d87ac4b8f4e5","sha512":"4e60f014b860dd4038646d046f8308c93d4ed4c6fe3b0c399051b4b87a97b1d6f2673f4372f61084aa4680d91a98023a876946199ab65fc7ed389bc5fd78d352","ssdeep":"192:Vgk/3k4ffg9iCcINXC86/HxvIzy4AS0EqHAsjNxbO2p6rBBRnAxOn:Vvk99iCVx6/Rgzy4AS0vHAkxb9aBBRnX","tlshash":"86f1c49f795570b76bdb34b1416f610faa3239239d86e081d2b9d0800d3d84aa327f2d","first_seen":"2023-03-07T01:06:37Z","last_seen":"2026-08-11T08:40:51.308706Z","times_seen":2534,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":328,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/581fee82337df.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/581fee82337df.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 313031\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":313031,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63711)","md5":"39f8e572ef830571828ee96a5e1ae3cb","sha1":"01e4c89c8d0e3963dd47535aefa51329374e98aa","sha256":"7c266e05d3841883558b00451f7e7a2cb72fe7eff21b62aec4614e4403c0d8f0","sha512":"4658ce1b1b2a7857096da6ab327ed58a71b1c8f1842bc088933933edf6e2e2eb825b64667a3f16953255ebb1602617b0545f2be8f0d8dfd11c7ddae072338f7a","ssdeep":"3072:AT+rHM9jRuxbXZQeR+5y/yI3GRkrKXslqV3IMG9+:Aqrs90nQel/yI3GRkhqt","tlshash":"3b64948cf691b0754393e1b1922f010ea33f656df44a45bcb199d8e22cb984e6627f7c","first_seen":"2026-01-09T18:46:07.194309Z","last_seen":"2026-08-04T16:19:47.34842Z","times_seen":16,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":403,"dns":0,"connect":0,"send":0,"wait":77,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f(2).txt","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f(2).txt HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5020\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/plain\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5020,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (5020), with no line terminators","md5":"f68941cecfcd6daa366f5a1e3ad114a0","sha1":"64140f205cbcc64b4b4e4e4f5177db1ced80fbc8","sha256":"fc75de40f2c43c5e14c78a66dac64e6c4d18ff08130ea7ff388e80cc13aec817","sha512":"3efd1afa0ebf38dedeb4af4fa0c1d7bdcfad17492f6bac7891ef4ec1d5ca872dab5b4d66be35585f99f4f893ba27cdb814a6aa13142b4181e50132378c6e5d26","ssdeep":"96:Eg1BcYm9PbxGKVk54Ele/3V6oGh1fc0Sqfn0nSqfn0c:EfLoh1wVg13Sq/0nSq/0c","tlshash":"b5a1c6dab7a0b153d2a360766b2f6507f4397d43dcc8e400f661c8a49cacadf109bb81","first_seen":"2026-01-09T18:46:07.187709Z","last_seen":"2026-04-14T13:21:48.619321Z","times_seen":14,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":537,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-user-list/1046484911/?random=1743438280387\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0z86340201za201zb890523752\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887799~102926062\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026label=8bGuCNbe11wQr6-A8wM\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026_tu=Cg\u0026data=google_custom_params%3Dwindow.google_tag_params\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzM5ty5YELWXDEZN9KKrBPELbyFDAsuds_Ega6-2FoBqPJ1L7Xj\u0026random=1140432296\u0026rmt_tld=0\u0026ipr=y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /pagead/1p-user-list/1046484911/?random=1743438280387\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0z86340201za201zb890523752\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887799~102926062\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026label=8bGuCNbe11wQr6-A8wM\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026_tu=Cg\u0026data=google_custom_params%3Dwindow.google_tag_params\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzM5ty5YELWXDEZN9KKrBPELbyFDAsuds_Ega6-2FoBqPJ1L7Xj\u0026random=1140432296\u0026rmt_tld=0\u0026ipr=y HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 14 Jan 2026 04:41:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T17:57:46.856117Z","times_seen":1027477,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:07.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"POST /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 26\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"getstyle=94019.06816408847"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:06 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"a3ccc056ccd800499a1fc3a0fe8fddd8","sha1":"bb8b82670c733f151a84360dc6e88e390d337ac9","sha256":"bd9ffb3e93ae7e538c1148cf835d6a8c51837974348fdb1215482f5dbe599604","sha512":"d6e3d3982845967f586bfa0207b00070368a106bdf7e21b3021f384cb1dbc60f7826bf70bd528240a7e81779ccdd46915e22337f86f46e01294db2e7e0f2e265","ssdeep":"","tlshash":"a5a002981556f0012a2f8960dfa015c10e906d151d5b64c0d57bd30e667c5255aeb091","first_seen":"2026-01-09T18:46:07.200295Z","last_seen":"2026-04-14T13:21:48.595408Z","times_seen":14,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:16.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"POST /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 26\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"getstyle=48286.96726941414"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:15 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"a3ccc056ccd800499a1fc3a0fe8fddd8","sha1":"bb8b82670c733f151a84360dc6e88e390d337ac9","sha256":"bd9ffb3e93ae7e538c1148cf835d6a8c51837974348fdb1215482f5dbe599604","sha512":"d6e3d3982845967f586bfa0207b00070368a106bdf7e21b3021f384cb1dbc60f7826bf70bd528240a7e81779ccdd46915e22337f86f46e01294db2e7e0f2e265","ssdeep":"","tlshash":"a5a002981556f0012a2f8960dfa015c10e906d151d5b64c0d57bd30e667c5255aeb091","first_seen":"2026-01-09T18:46:07.200295Z","last_seen":"2026-04-14T13:21:48.595408Z","times_seen":14,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/2.78eef449.chunk.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/2.78eef449.chunk.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:01 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:43:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14495\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14495,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (14471), with no line terminators","md5":"622e8debf849b71b58f09070045bfa6e","sha1":"887e8c40a50d1a72a64bb3563290ab6b1190b2ab","sha256":"13b30012185feaa5052015dd0aa46f809d14312ad2811a6f2a5932c26bc9c49d","sha512":"a388e31ff64ae6e799b214e8e563456012dfe17c2b8035150ae194baedb0681d2b8c5bf5da313274ea9ea7292ce6f38f6f89c7fd7cc06e3cac5edccbb1cccaa5","ssdeep":"192:ORdYS9xlQTbnB4qhJ21dN/b+c4fer+m/FnV6pXBJrkEuSCj:Mf/jUpG","tlshash":"2552b6b57f891005e6738b3aa1d0bfdeba1a566682124e67e6979c35cfc31900353b88","first_seen":"2026-01-09T18:46:07.311674Z","last_seen":"2026-04-14T13:21:48.644516Z","times_seen":14,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":143,"dns":0,"connect":77,"send":0,"wait":78,"receive":67,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/fbevents.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/fbevents.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:50 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 268237\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":268237,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10007)","md5":"47350d53d463c5d4bebdba86ac8650f0","sha1":"afde848a9a6d408e66f6b607d2fb7a567c3d0f12","sha256":"9ff367f1fd7a84f9d1b2a5279c69a27cf5d26fe212b691099148a2907a6cbe83","sha512":"a6d68b24d9de50c450af4e7cbee75eb821acc99a6ec59cf59ceec588128120508021e9662bad88761f2b9ea3de161dcf73d93670132709e5bb522a9db7dae3b9","ssdeep":"3072:QbLeYj8yRmJn3AI5F8NteqZEbkxrTDeMrx4x0upFEKid3McQYZ:QbLeYIWmJQ88NNv6MrPupKKid3McQ2","tlshash":"7744978575d1b09247b678ac922f4007b1bb99e6b0c8c930d99dedd43e784ed4037faa","first_seen":"2025-03-29T04:58:48.46543Z","last_seen":"2026-04-18T06:18:27.764084Z","times_seen":32,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/w.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/w.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5349\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5349,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5349), with no line terminators","md5":"e31293f40e8a324de552ff593ee76a9b","sha1":"8dc5eda61e77f52f2a4f914e2a69976f9a0825e3","sha256":"6cb6821219dae9fa9a21519d86d7ec7acaf0c4dd61463eb336eb92964feebef3","sha512":"9489e63dba6b463431dcd2620aca1cab9ec6ed96534d0cd987b23ebf046dc2a7645000bce0de5ab6b8e88e31c7ce7af435eef8a6a83f3c62bac305c16cb226de","ssdeep":"96:1MKn3lQuuMxMlO0PrcjmAlDq1a+/Iq7E36A8z17iipZ8T:ui3lnuyARPYjmw25g/kgIO","tlshash":"3db1d95b3a44a26143d7206d572ff305f27211ae6859d052a315e8d47c6898fe223fef","first_seen":"2024-01-25T23:36:04Z","last_seen":"2026-08-09T20:16:48.3468Z","times_seen":5147,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/gtm.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/gtm.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 650065\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":650065,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65289)","md5":"62ac53d68c7fc0eabfc13a5a3f7c5518","sha1":"28401a45afa280c588038acfcd01a80289e0681e","sha256":"18abda1c6bc9691949a184be5d6118f93f9459cc5b806e80db048d469ee02f46","sha512":"1eb4c6d48a670c6de2ad1cf071ec96fcb5b86c82f967ffa90a6f03a1a45a038e795ed148a744c96ffcf4c624651b747c5569ed8a19b63f53a0bdf933e79da037","ssdeep":"6144:vaewV+OiW36Ta6NJOWMYpwmFmwqhMpbxiA:de3aai5pnpt","tlshash":"bed409cdf545e47ac2a36560d83f490e727d24e2734ca890e49ac8e82d745b93163faf","first_seen":"2026-01-09T18:46:07.364713Z","last_seen":"2026-04-14T13:21:48.615245Z","times_seen":14,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":80,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js(2)","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js(2) HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 276642\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":276642,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2361)","md5":"0a124f54d2a9a8f7526c4de7fcf74a7a","sha1":"5a88411958dfa1e8ef746616b67f6fb6ed9674d3","sha256":"5747d568377dcf56e15f7ae24bbfb1883c2bf4db7dba49f1e247b6d4ed40bb8e","sha512":"6a9c9b34c73d684bdfbf159410eee4fb265ebf78264cd3fdfd411cd6d0ce209ebda341dc303c94f4a95cb95af01d14b70529f06f526651bc4452d774554bd4a8","ssdeep":"3072:LuLKyAFfSfyYawozZw0Ina+k4K7mNFwOiHqFxUJpW7TmFmwq06Y4xmf:CWB6G9qapOWEYpAmFmwqhqf","tlshash":"e744e7dc7786b46a93936478407f000bb13b6da2f84cd894e182d5e83e74aa94277f7d","first_seen":"2026-01-09T18:46:07.26922Z","last_seen":"2026-04-14T13:21:48.617722Z","times_seen":14,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":463,"dns":0,"connect":0,"send":0,"wait":91,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/favicon-16x16.png","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:04.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/favicon-16x16.png HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS2.1.s1768365663$o1$g0$t1768365663$j60$l0$h1434116753; _ga=GA1.1.1972105578.1768365664\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1151\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"3311bd6e1bd37c98c2c7ac75858f9d2e","sha1":"631ae66a3ac5ad3448e1743b0152897a68f44e6d","sha256":"4ce5a828f9557f0b5bd66d6509a5f69248579207a1926f56b342f7c0ddabc725","sha512":"68e68242346f98b84cce500d927f5124adeb4578496f0a41cb7cc77d8849d39b9544bab2866fb575dff77e845c3d76de5cd573eec7612307d7c2ccdeba260c63","ssdeep":"","tlshash":"842196c0f121f05ae16266bdae270940cf6605ee8747c74ebb91f4705da83b881f3b42","first_seen":"2026-01-09T18:46:07.308126Z","last_seen":"2026-04-14T13:21:48.62609Z","times_seen":14,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.aglty.io/scotiabank-chile/fonts/font-face/web-font-2024/scotia_headline-webfont.woff2","fqdn":"cdn.aglty.io","domain":"aglty.io","tld":"io"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aglty.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 12:18:14 GMT","end":"Wed, 25 Mar 2026 12:18:13 GMT"},"fingerprint":{"sha1":"FE:FF:2C:93:FF:40:6D:EA:C7:D8:73:C1:3D:5E:D5:69:37:0E:D0:AB","sha256":"EF:36:88:75:D2:E5:2A:A6:F7:71:9D:C9:82:DA:37:76:E8:C3:74:74:F2:03:43:1A:6A:2C:31:18:03:18:A4:C1"}}},"request":{"raw":"GET /scotiabank-chile/fonts/font-face/web-font-2024/scotia_headline-webfont.woff2 HTTP/1.1\r\nHost: cdn.aglty.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.aglty.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-aspnetmvc-version: 5.2\r\naccess-control-allow-origin: *\r\nx-frame-options: SELF\r\nrequest-context: appId=cid-v1:b6356dc1-e87f-411b-9bf6-6a5f0308e7de\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=604800, s-maxage=604800\r\naccess-control-expose-headers: Request-Context\r\ncontent-security-policy: default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline' *; object-src 'none';\r\nx-ms-blob-cache-control: public, max-age=604800, s-maxage=604800\r\nlast-modified: Wed, 05 Feb 2025 21:39:17 GMT\r\nexpires: Tue, 09 Dec 2025 02:16:20 GMT\r\nserver: Microsoft-IIS/10.0\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 467944\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\nx-served-by: cache-chi-klot8100063-CHI, cache-chi-klot8100141-CHI, cache-hel1410032-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 319, 0\r\nx-timer: S1768365665.726413,VS0,VE115\r\nvary: Accept\r\nguid: scotiabank-chile\r\nregion: usa\r\nbackend: ssl_shield_chi_il_us\r\nurl: /scotiabank-chile/fonts/font-face/web-font-2024/scotia_headline-webfont.woff2\r\ncontent-length: 19376\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":19376,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19376, version 1.0","md5":"a7878c0c4d359204aa2af022d7935ba8","sha1":"98d4905469aba4fd584c8bba668d0a69382df155","sha256":"97c0d0f1e2445f5d49351f892b965ee792f1de56b4eed559f51f8c46def25049","sha512":"1bed349cf9e0e09b43e9612f0ba958fff043d803adc636bc46fbeb72ab903276916a1e47e12642b474e5f1003ec09e13f0d02b3a411d63f2e7bd235188021fb4","ssdeep":"384:u5qN4t9MvkWPAj52cwCszPeKQ4CDtwgZ5/ebqgh/wfEOxSNIi0LuIPkTvgUDctR:Zaws5Qc6zrQ/D+gWbqu4MmLaX0NX","tlshash":"0092d101834a09c8ea72dd35f82f6c166156d310c87e0b16b94d6d228b4f6fed94e77d","first_seen":"2026-01-09T18:46:07.258266Z","last_seen":"2026-08-04T16:19:47.386194Z","times_seen":16,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:13.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"POST /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 26\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"getstyle=23868.78400789341"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:12 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"a3ccc056ccd800499a1fc3a0fe8fddd8","sha1":"bb8b82670c733f151a84360dc6e88e390d337ac9","sha256":"bd9ffb3e93ae7e538c1148cf835d6a8c51837974348fdb1215482f5dbe599604","sha512":"d6e3d3982845967f586bfa0207b00070368a106bdf7e21b3021f384cb1dbc60f7826bf70bd528240a7e81779ccdd46915e22337f86f46e01294db2e7e0f2e265","ssdeep":"","tlshash":"a5a002981556f0012a2f8960dfa015c10e906d151d5b64c0d57bd30e667c5255aeb091","first_seen":"2026-01-09T18:46:07.200295Z","last_seen":"2026-04-14T13:21:48.595408Z","times_seen":14,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotiatutoriales.png","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotiatutoriales.png HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 47871\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":47871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 608 x 362, 8-bit colormap, non-interlaced","md5":"5f4478c7ac9b500a9d4a8321378afdc7","sha1":"18e60a2b3099264de6132c1c8d850c70d6a780be","sha256":"a6bdb69dde5ba0a6406bea20f55cec6dea389f690452362ce9364b684f057e1a","sha512":"add83b1641ff424a85e4478b166a8726fbf6c49b38af8d6efe305788e31710e96c3ff93d528cfc6daa590f5d0c13304183ca8cf7735e402411dba39f077d47af","ssdeep":"768:cILX6mCQQlZgZieWClJWOnCQV4dGVgVJmVvTA/0bSyFjK0njyxTKnu+wR/Eq:bX6R/IWCDTVexV0ZTXbjKosTuubF","tlshash":"3d23f1c7898bc2d0713ac6409348d26c220bdbdb27c3485a77ee34fa55f6ae4d277496","first_seen":"2026-01-09T18:46:07.222441Z","last_seen":"2026-04-14T13:21:48.612677Z","times_seen":14,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":705,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-light.woff2","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-light.woff2 HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css\r\nCookie: _gcl_au=1.1.801329264.1768365663\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24624\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24624,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24624, version 1.0","md5":"496e467c28b6482b4cc3330f7325ff30","sha1":"5c5ae7df11d6f4fb11fd0dfe6337fcdda86fbf3d","sha256":"366551a22c517eaf8ad2594c93cdbaa932074ab8a05257fa84efae1ab6dfc27b","sha512":"c04b8f305775848a23f8b79be9f3ae76517c716e80ef6369a1567cba8f04b72d659a270c07d05f43925974b8483d657de248e4c92dcc8922575ae9649da81961","ssdeep":"384:vav2u9kOvc/OPOEjKprLT3HGCgm8zlcKLKeO6rZcFSM7Nd3P/MjTm1/zPIHI8PLH:vavLzfWRTXAhlcOK/6dahP06/kHI4+yn","tlshash":"18b2d0ce83cd2a0edfc109570536b7fa8c579bd07dedd706071eb85d81a58e6086278a","first_seen":"2026-01-09T18:46:07.280404Z","last_seen":"2026-04-14T13:21:48.639587Z","times_seen":14,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com.br/pagead/1p-user-list/996198529/?random=1743438280076\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0za200\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102509683~102788824~102803279~102813109~102887800~102926062\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzMh_69ylu_NbcyJ9QNtxf8C-koWaaFuA4bPFc2FhPCaFJJCMQ1\u0026random=2627689808\u0026rmt_tld=1\u0026ipr=y","fqdn":"www.google.com.br","domain":"google.com.br","tld":"com.br"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com.br","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:58:15 GMT","end":"Wed, 25 Feb 2026 15:58:14 GMT"},"fingerprint":{"sha1":"29:32:5A:15:FC:6B:81:8A:11:2D:6E:23:E2:15:33:8D:65:2B:02:42","sha256":"25:26:B2:66:B2:15:17:5B:E3:0C:6B:97:F4:07:CA:A5:92:A4:6B:5B:98:FF:59:F1:4C:62:83:90:C3:F4:9E:55"}}},"request":{"raw":"GET /pagead/1p-user-list/996198529/?random=1743438280076\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0za200\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102509683~102788824~102803279~102813109~102887800~102926062\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzMh_69ylu_NbcyJ9QNtxf8C-koWaaFuA4bPFc2FhPCaFJJCMQ1\u0026random=2627689808\u0026rmt_tld=1\u0026ipr=y HTTP/1.1\r\nHost: www.google.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 14 Jan 2026 04:41:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T17:57:46.856117Z","times_seen":1027477,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":266,"dns":10,"connect":20,"send":0,"wait":23,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-user-list/874209459/?random=1743438280156\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0za200\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887799~102926062~102975948~102976415\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzMiVTe4Yq457ePTWFU_KeFsrJxNzFVZv1RNcp4iZ-AnAovf6gx\u0026random=3556402813\u0026rmt_tld=0\u0026ipr=y","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /pagead/1p-user-list/874209459/?random=1743438280156\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0za200\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887799~102926062~102975948~102976415\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzMiVTe4Yq457ePTWFU_KeFsrJxNzFVZv1RNcp4iZ-AnAovf6gx\u0026random=3556402813\u0026rmt_tld=0\u0026ipr=y HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 14 Jan 2026 04:41:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T17:57:46.856117Z","times_seen":1027477,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com.br/pagead/1p-user-list/874209459/?random=1743438280156\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0za200\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887799~102926062~102975948~102976415\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzMiVTe4Yq457ePTWFU_KeFsrJxNzFVZv1RNcp4iZ-AnAovf6gx\u0026random=3556402813\u0026rmt_tld=1\u0026ipr=y","fqdn":"www.google.com.br","domain":"google.com.br","tld":"com.br"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com.br","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:58:15 GMT","end":"Wed, 25 Feb 2026 15:58:14 GMT"},"fingerprint":{"sha1":"29:32:5A:15:FC:6B:81:8A:11:2D:6E:23:E2:15:33:8D:65:2B:02:42","sha256":"25:26:B2:66:B2:15:17:5B:E3:0C:6B:97:F4:07:CA:A5:92:A4:6B:5B:98:FF:59:F1:4C:62:83:90:C3:F4:9E:55"}}},"request":{"raw":"GET /pagead/1p-user-list/874209459/?random=1743438280156\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0za200\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887799~102926062~102975948~102976415\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzMiVTe4Yq457ePTWFU_KeFsrJxNzFVZv1RNcp4iZ-AnAovf6gx\u0026random=3556402813\u0026rmt_tld=1\u0026ipr=y HTTP/1.1\r\nHost: www.google.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 14 Jan 2026 04:41:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T17:57:46.856117Z","times_seen":1027477,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":211,"dns":35,"connect":8,"send":0,"wait":21,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 34771\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Agility CMS","description":"Agility CMS is an enterprise-level content management system provider offering scalable solutions for managing digital content across multiple platforms.","website":"https://agilitycms.com","common_platform_enumeration":"","icon":"Agility.svg","categories":["CMS"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":34771,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3257)","md5":"880143f43c080aa964cd04310d18f3b2","sha1":"0e586cc8be5baff58722cd069ad639ccea80ee35","sha256":"3cc9211b77d341980f1cd5c9e8fd8cd91ef02044adf3998bf59d020f7ec969ae","sha512":"b4e34f2c42581abc6971b7ef1a6a474022f9b932be4a43ac2f93875ebd311aa91f206e73300ef4eed1138f5c8b0b937cd2851bd433da7099b7d1ebd8d87155fe","ssdeep":"768:rWGv3B4xQFw+RBOSX7XcKLCiQwrwM/8CdVTRawcpys0WLSV1wTWhQDizJP3LVMlP:rWGv3fRBOSX7Xce6wrwkdxcOrwamDOJA","tlshash":"99f2f862adc6485b126350d1a67bb35ca36ac007ef06cc94b7fc92665bcdfca4813b5c","first_seen":"2026-01-09T18:46:07.271083Z","last_seen":"2026-04-14T13:21:48.614348Z","times_seen":14,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/divisas-login.jpg","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/divisas-login.jpg HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 35067\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35067,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x362, components 3","md5":"65d9abf3c8c7632c9a17ffd8ba6f4e40","sha1":"fea734511a893faac21c949444f373f33f7ec654","sha256":"5de778bd7373929ec72fbf784a71bc9320ee05ed482d17d4604268153f65eeb9","sha512":"c48c8d74423910ef881343fdcd321fe8b5deefe7b5d291a6a7d63680e7ce3d45611414349ca7fd68cfe0d557131519927018e7f2a875d154ce4d7da641a62e68","ssdeep":"768:004yxHYhqzJjZecUyfnt7wNNgpGggeHN4LS+budV:H4ywxy/tPG+t49be","tlshash":"7cf201ff2e0ac6439f449c96e47acaba5cc501b34c9e009179a6744af13a1de4dca357","first_seen":"2026-01-09T18:46:07.267189Z","last_seen":"2026-04-14T13:21:48.604518Z","times_seen":14,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":729,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 49184\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49184,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7930d558200e92006b4f093323f86f46","sha1":"dcf5fc438d73006bc4b7dddb4d7b60681477bf23","sha256":"3dbe7a2378c33fcf79841d5486fcf011dcd658d93499af08165c39174806fb03","sha512":"f8eeaa6a29e0072bf42898ab399e3c86b53bca8efe1e24ba259bc757d43506c75dd963135cc81e005f9d8a7945529cbb4bb8af9847707be51e889140a4f1aed2","ssdeep":"384:aDtEo0/pDU/a4O47GZ4gMpAvisfTMFuLryGKZaQlPKCIq0CdsqM//X/fBY0:aDtEo0xU/a+e0gVQpbIqg5","tlshash":"cb23db68eac0155a72374d7c63a697c5db1900938e02877d7f8ae7408f7f06aa261fdc","first_seen":"2026-01-09T18:46:07.183812Z","last_seen":"2026-08-04T16:19:47.407222Z","times_seen":16,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.aglty.io/scotiabank-chile/fonts/font-face/web-font-2024/scotia_rg-webfont.woff2","fqdn":"cdn.aglty.io","domain":"aglty.io","tld":"io"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aglty.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 12:18:14 GMT","end":"Wed, 25 Mar 2026 12:18:13 GMT"},"fingerprint":{"sha1":"FE:FF:2C:93:FF:40:6D:EA:C7:D8:73:C1:3D:5E:D5:69:37:0E:D0:AB","sha256":"EF:36:88:75:D2:E5:2A:A6:F7:71:9D:C9:82:DA:37:76:E8:C3:74:74:F2:03:43:1A:6A:2C:31:18:03:18:A4:C1"}}},"request":{"raw":"GET /scotiabank-chile/fonts/font-face/web-font-2024/scotia_rg-webfont.woff2 HTTP/1.1\r\nHost: cdn.aglty.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.aglty.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-ms-blob-cache-control: public, max-age=604800, s-maxage=604800\r\nx-content-type-options: nosniff\r\nx-aspnetmvc-version: 5.2\r\nlast-modified: Wed, 05 Feb 2025 21:39:17 GMT\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-security-policy: default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline' *; object-src 'none';\r\nexpires: Mon, 19 Jan 2026 08:56:14 GMT\r\nserver: Microsoft-IIS/10.0\r\naccess-control-allow-origin: *\r\nrequest-context: appId=cid-v1:b6356dc1-e87f-411b-9bf6-6a5f0308e7de\r\nx-frame-options: SELF\r\naccess-control-expose-headers: Request-Context\r\nx-xss-protection: 1; mode=block\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 157490\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\nx-served-by: cache-chi-klot8100068-CHI, cache-chi-klot8100068-CHI, cache-hel1410032-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 18, 0\r\nx-timer: S1768365665.734887,VS0,VE115\r\nvary: Accept\r\nguid: scotiabank-chile\r\nregion: usa\r\nbackend: ssl_shield_chi_il_us\r\nurl: /scotiabank-chile/fonts/font-face/web-font-2024/scotia_rg-webfont.woff2\r\ncontent-length: 19884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":19884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19884, version 1.0","md5":"1967b98aa085440d9e24d04d9d762ec5","sha1":"63bc227eb30386d80114ecd52b62c3c509545426","sha256":"83274c224df6037c04caabfbcbb73a283ec2db3abc02c892f70715e528374f89","sha512":"4e35f18fbd97614a77ee24a1be7910d5a2dcab82e4a2e7f0fee476a786838bc91251c369f4b513ce0c198aed59113babe0f81632f0b63e6dd5a1611f9435a21c","ssdeep":"384:JWwY29aHPYyB05MiFB8Hmprro2uFl0WwhObmLgQs9Ink/tZlyBr:JWb29Ryy8mprk2uFaWwoSFkDlyp","tlshash":"9892e1756a0e62efdf65ec3ec030f96064a46e1000d19182941b34cd22d9f86dcebdbe","first_seen":"2026-01-09T18:46:07.332704Z","last_seen":"2026-08-04T16:19:47.487034Z","times_seen":16,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-light.woff2","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-light.woff2 HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css\r\nCookie: _gcl_au=1.1.801329264.1768365663\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24624\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24624,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24624, version 1.0","md5":"496e467c28b6482b4cc3330f7325ff30","sha1":"5c5ae7df11d6f4fb11fd0dfe6337fcdda86fbf3d","sha256":"366551a22c517eaf8ad2594c93cdbaa932074ab8a05257fa84efae1ab6dfc27b","sha512":"c04b8f305775848a23f8b79be9f3ae76517c716e80ef6369a1567cba8f04b72d659a270c07d05f43925974b8483d657de248e4c92dcc8922575ae9649da81961","ssdeep":"384:vav2u9kOvc/OPOEjKprLT3HGCgm8zlcKLKeO6rZcFSM7Nd3P/MjTm1/zPIHI8PLH:vavLzfWRTXAhlcOK/6dahP06/kHI4+yn","tlshash":"18b2d0ce83cd2a0edfc109570536b7fa8c579bd07dedd706071eb85d81a58e6086278a","first_seen":"2026-01-09T18:46:07.280404Z","last_seen":"2026-04-14T13:21:48.639587Z","times_seen":14,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:01 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3583\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3583,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fe40272ae193f794396c8792643b2e4f","sha1":"91180771cce9245feb796ab2ec6dbe8008ca68ce","sha256":"7ff5906a886a87c13cedc5075919cae14b9025a3614b68d80be37c7bb003533e","sha512":"6d870d577856334baa0a81a6c63a348a180f2cec5d27e152ac6278f5c524ce400b67eb732d2c72bc389079e8cc7d49fe224909ec6cef4ce2e805eb017938dc20","ssdeep":"","tlshash":"7271e510e8c53c3962f958ca67e79fd01aba39220009d4dea63b5455fd3bb2cc361b98","first_seen":"2026-01-09T18:46:07.286818Z","last_seen":"2026-04-14T13:21:48.589669Z","times_seen":14,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":143,"dns":1,"connect":71,"send":0,"wait":78,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/loading.gif","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/loading.gif HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 05 Dec 2024 18:43:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 127439\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":127439,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1567 x 1561","md5":"c336831c1170b33d9153c0f54182f7cf","sha1":"e352b26bbfa8b233050087d6cb32667da3ff809c","sha256":"524eb2925cca1fd41434b23b07ff5620f340930fcddadbee43c24054d9080364","sha512":"74671a66affe0246f4fc70efe8a3b22be4b14ca622eea7f89b3ef4bee8f6578a0c8a1059d07b29b5c9ff8e2bcb179a64313244b70bb982b8294ada4cc6904195","ssdeep":"3072:Ah+xiIH1mjM5BlUUDFXauuSqo6uZZqv/BSrmVbm+Q77:Ah8JH1yM5vxluSsmq3sm4+Q77","tlshash":"6ac3126e6b6931bc3a1a766d4c9e2c4e00ca4da4443127371d6be4fb221b3d7610dbde","first_seen":"2024-06-30T13:59:52Z","last_seen":"2026-07-09T05:47:49.671658Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1112,"timings":{"blocked":1031,"dns":0,"connect":0,"send":0,"wait":77,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/destination","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/destination HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:50 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 278300\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":278300,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2361)","md5":"df33f76166dc0d7e432193e43f67f19d","sha1":"7fe4c831dda6535431ac6d7358a9d6a2ca3aff76","sha256":"ffa6900d49bfab20c3b54e5fd6f91fd9c2237b72cb2807485738aeb646428745","sha512":"95929a04927f33b66376e5027bfdc18cc7d2252654671f6e2f1933f4fc27b94699fd09e40a6c124e276b7232317fec9b82c4791c4fec0faede48698a520a2955","ssdeep":"3072:LS1xWi7vgSpRYzRcH0LuvDlWypBoPYz09RNt6Qr9J8zhodg/Ye8S36Uu0kOWTPDG:Wl74ERYNO0P3R9aSdg/YeMDLS","tlshash":"2844e7dd77d6b46683a27978403f000bb13b6d92f84cc894e182d6e92d74aa94277f7c","first_seen":"2026-01-09T18:46:07.182131Z","last_seen":"2026-04-14T13:21:48.581479Z","times_seen":14,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-script.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-script.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2503\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7c8835848a59896434b221c6110e262c","sha1":"4ede6e6378a846ba79bc4a3a1ffbf858df3a48ce","sha256":"ae6f0ccb1b715f2f3451cc96383e44d3627dad3991e2e223fd4fb0afed99932d","sha512":"f7044d88d4ce3f2c96a300f475139a8ed4be0bd571ad577e1f6488f0c1bc80a616188d93d3e87324ff75f4829dca9c4a77dd62db357494d28f990b9c6cb64e69","ssdeep":"","tlshash":"ea51ee09f3f8d1b122bf769e1927ac09763a0463bc4b0a14f87d067c1fd51d95266a27","first_seen":"2026-01-09T18:46:07.275952Z","last_seen":"2026-08-04T16:19:47.396382Z","times_seen":17,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":401,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-light.woff2","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-light.woff2 HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css\r\nCookie: _gcl_au=1.1.801329264.1768365663\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24624\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24624,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24624, version 1.0","md5":"496e467c28b6482b4cc3330f7325ff30","sha1":"5c5ae7df11d6f4fb11fd0dfe6337fcdda86fbf3d","sha256":"366551a22c517eaf8ad2594c93cdbaa932074ab8a05257fa84efae1ab6dfc27b","sha512":"c04b8f305775848a23f8b79be9f3ae76517c716e80ef6369a1567cba8f04b72d659a270c07d05f43925974b8483d657de248e4c92dcc8922575ae9649da81961","ssdeep":"384:vav2u9kOvc/OPOEjKprLT3HGCgm8zlcKLKeO6rZcFSM7Nd3P/MjTm1/zPIHI8PLH:vavLzfWRTXAhlcOK/6dahP06/kHI4+yn","tlshash":"18b2d0ce83cd2a0edfc109570536b7fa8c579bd07dedd706071eb85d81a58e6086278a","first_seen":"2026-01-09T18:46:07.280404Z","last_seen":"2026-04-14T13:21:48.639587Z","times_seen":14,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-6EDD061F8G\u0026cid=1972105578.1768365664\u0026gtm=45je61d0h2v890523752z86340201za20gzb6340201zd6340201\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~105391253~115616985~115938466~115938468~116910503~116988315~117041588\u0026z=1738228645","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:04.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:11:48 GMT","end":"Tue, 03 Mar 2026 17:11:47 GMT"},"fingerprint":{"sha1":"8F:0B:23:DF:A0:C9:99:13:F5:C7:11:22:AF:C9:45:21:4A:43:26:D4","sha256":"39:90:73:88:FD:92:E5:97:4B:07:FD:0B:89:C0:17:FC:5C:93:F1:51:5F:E0:A9:3F:91:7B:D7:3E:D0:14:31:98"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-6EDD061F8G\u0026cid=1972105578.1768365664\u0026gtm=45je61d0h2v890523752z86340201za20gzb6340201zd6340201\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~105391253~115616985~115938466~115938468~116910503~116988315~117041588\u0026z=1738228645 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T17:57:46.856117Z","times_seen":1027477,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":48,"dns":2,"connect":7,"send":0,"wait":28,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/996198529.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/996198529.html HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:04 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 804\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":804,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (641)","md5":"64030cd51e4b6459859b815ddcc77d1c","sha1":"e8cade61368e82fbe8c87a97490e1a9ed8d44cdc","sha256":"5b455b4fbeaac0299e61b797932e48bb67d70c4b088886babb605fd1f773340e","sha512":"b840c48f61cf48c2b6d65c3ca901cc9243b0052aef3d26f482a52166373d2902e2835864e51ac9a80c7b3295525d918e234842f425f924beb1636a466dd18a76","ssdeep":"","tlshash":"100141ad5d425943756328005dccc60c8deea597c800cda8f51cb1acb4cb7ce5ce7682","first_seen":"2026-01-09T18:46:07.265637Z","last_seen":"2026-04-14T13:21:48.629915Z","times_seen":14,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-grid.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/scotia-grid.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 71781\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":71781,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"fe7c5d98a3af79d54eb8e69039248ad4","sha1":"7824b23362555521cd42d38b399e245083b057e2","sha256":"801fd3b78f8146b36b1d0df88f38d2e5771ad11053d7dfea7ca90225bda6ede1","sha512":"83ec8f9ffd86d8843f407de9c0f9d9edb8cff38c37563993584797688ffbd30430d86fdc945797450630e3366c8fc1547e42e2b22e25213392e3bc84516896a9","ssdeep":"768:0zYqtqQRYqvRTP1jJeMyaJwCgioEwCW5bQdLmnptDwCeyioxwCv5bDdLfyY2hwCJ:0vN2H/zDL4iDF4t","tlshash":"5f63175afcf101087566662d55ea77f87dbc904be259edea78d23330cf463c28c92889","first_seen":"2026-01-09T18:46:07.205043Z","last_seen":"2026-08-04T16:19:47.362883Z","times_seen":16,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":340,"dns":0,"connect":0,"send":0,"wait":76,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/bootstrap.min.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/bootstrap.min.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/main.88098fe2.chunk.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:24:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 110\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"31e09a59fc669f89b150a295ad363ce6","sha1":"02b7178d7224edb2a103e509cbab213338f28031","sha256":"e395e76006ec9f97bcc829ed0e6a4d6348bdcedfe67c1a5ea8adf58ba7da6946","sha512":"28d3c5c912f815b11fd64df4d13a73339f7227f107e84b450c19b7f9cdb7ac802b12b42fd1fba0a068c91dfd17db9a842889a168844b996663f2abb91d0deebd","ssdeep":"","tlshash":"86b092296b24252628a00c53a80cda239264eb0545962328714c2cb14220a4abce2628","first_seen":"2026-01-09T18:46:07.30226Z","last_seen":"2026-04-14T13:21:48.613519Z","times_seen":14,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":426,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-996198529","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=AW-996198529 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Jan 2026 04:41:03 GMT\r\nexpires: Wed, 14 Jan 2026 04:41:03 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 14 Jan 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 121434\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346004,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"82983fc4b69de90dd36a74b47de7b090","sha1":"41190167fa9635659e8c58637d2b1c86bcd34216","sha256":"b1f51b0cb54f19aace3c50430dd443b1994cc90a729b4d468a73ea4ea2ca14e9","sha512":"db6c885d9a6c28ec3540c3d599b81f4331a672d7a9ab469cd078c67f01fb1359864e0e0bd8e940e35f3d45e1d696ef32fecc10d9cfeca891402da2a8d3eb84f3","ssdeep":"6144:if7pQF/SkJfU896Y4At3OyrlNcNS5qdO92510c:SoSkKhYnWdO+/","tlshash":"047429cd73c6742693a3a478403f114ba17b6a91f84cc895f186dce42e74aaa4277f7c","first_seen":"2026-01-14T04:41:59.633126Z","last_seen":"2026-01-14T04:41:59.633126Z","times_seen":1,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":139,"dns":1,"connect":10,"send":0,"wait":26,"receive":30,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:04.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"POST /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 27\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS2.1.s1768365663$o1$g0$t1768365663$j60$l0$h1434116753; _ga=GA1.1.1972105578.1768365664\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":27,"data":"getstyle=17500.701133933562"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: PHPSESSID=c8243befdb840b094abc6f7bf1d3f756; path=/\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"a3ccc056ccd800499a1fc3a0fe8fddd8","sha1":"bb8b82670c733f151a84360dc6e88e390d337ac9","sha256":"bd9ffb3e93ae7e538c1148cf835d6a8c51837974348fdb1215482f5dbe599604","sha512":"d6e3d3982845967f586bfa0207b00070368a106bdf7e21b3021f384cb1dbc60f7826bf70bd528240a7e81779ccdd46915e22337f86f46e01294db2e7e0f2e265","ssdeep":"","tlshash":"a5a002981556f0012a2f8960dfa015c10e906d151d5b64c0d57bd30e667c5255aeb091","first_seen":"2026-01-09T18:46:07.200295Z","last_seen":"2026-04-14T13:21:48.595408Z","times_seen":14,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.aglty.io/scotiabank-chile/librerias/canvas-framework/new-fonts/assets/fonts/Scotia_W_Rg.woff","fqdn":"cdn.aglty.io","domain":"aglty.io","tld":"io"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aglty.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 12:18:14 GMT","end":"Wed, 25 Mar 2026 12:18:13 GMT"},"fingerprint":{"sha1":"FE:FF:2C:93:FF:40:6D:EA:C7:D8:73:C1:3D:5E:D5:69:37:0E:D0:AB","sha256":"EF:36:88:75:D2:E5:2A:A6:F7:71:9D:C9:82:DA:37:76:E8:C3:74:74:F2:03:43:1A:6A:2C:31:18:03:18:A4:C1"}}},"request":{"raw":"GET /scotiabank-chile/librerias/canvas-framework/new-fonts/assets/fonts/Scotia_W_Rg.woff HTTP/1.1\r\nHost: cdn.aglty.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.aglty.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-aspnetmvc-version: 5.2\r\naccess-control-allow-origin: *\r\nx-frame-options: SELF\r\nrequest-context: appId=cid-v1:b6356dc1-e87f-411b-9bf6-6a5f0308e7de\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=604800, s-maxage=604800\r\naccess-control-expose-headers: Request-Context\r\ncontent-security-policy: default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline' *; object-src 'none';\r\ncontent-type: application/font-woff\r\nx-ms-blob-cache-control: public, max-age=604800, s-maxage=604800\r\nlast-modified: Wed, 05 Feb 2025 21:39:17 GMT\r\nexpires: Wed, 10 Dec 2025 05:33:06 GMT\r\nserver: Microsoft-IIS/10.0\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\nage: 571653\r\nx-served-by: cache-chi-klot8100026-CHI, cache-chi-klot8100153-CHI, cache-hel1410032-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 382, 2\r\nx-timer: S1768365665.672482,VS0,VE0\r\nvary: Accept\r\nguid: scotiabank-chile\r\nregion: usa\r\nbackend: ssl_shield_chi_il_us\r\nurl: /scotiabank-chile/librerias/canvas-framework/new-fonts/assets/fonts/Scotia_W_Rg.woff\r\ncontent-length: 13920\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":13920,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 13920, version 1.0","md5":"554fc89ffae388cadee5ea499784a9fa","sha1":"8a306196497f64df9aa648e104dd464b32c1d2e9","sha256":"ddff7291f55ccc4df541ec758c3024cb7d3942289495fbc740e6fc80ff831377","sha512":"7740d7e8cb7a45b72d5b78c8020e808178ed1d0b4e4e26feaf16228564c762ecd9e92fe8729f314d9e578c476c47a91da38ccd93060237f8686320f1ede21f0c","ssdeep":"384:JyQsVlMaHgIUpejekr2XyEgBIm0i8HT9Wa/6vC:oQKMaHtyejekr2iEgBh0i8F0C","tlshash":"6452d118a381679ac214df39b7106f9d1775cc08c9020eee8c7bd904e2d4357ea6ad9f","first_seen":"2023-05-08T12:23:11Z","last_seen":"2026-08-04T16:19:47.379694Z","times_seen":52,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-996198529","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=AW-996198529 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\nexpires: Wed, 14 Jan 2026 04:41:04 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 14 Jan 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 121445\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345994,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"a7f28fa434d04a4618aa7f13d5325402","sha1":"cc62ccd2fcd90cf05d7920fb764e025398c33df6","sha256":"1a494a4e998e1f1bc7a3aca4ec0ebab3d7741efa961d28e2becd8406a9fd78e8","sha512":"3ae52b1b692beba321f4a5961e819fb54b8712b82326845fa5a125b05abd22feb9b9b4ae5827e7f9e28c325e7702ffd11de9a9f7d3c4a4e981dfde09b236e0f7","ssdeep":"6144:+f7pQF/SkJfU896Y4At3OyrlNcNS5qdO92510c:GoSkKhYnWdO+/","tlshash":"b77429cd73c6742693a3a478403f114ba17b6a91f84cc895f186dce42e74aaa4277f7c","first_seen":"2026-01-14T04:41:59.635063Z","last_seen":"2026-01-14T04:41:59.635063Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/1046484911.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/1046484911.html HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:04 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 876\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":876,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (713)","md5":"f92fc3da68a4f4725b0866f5f8449a56","sha1":"30fded8f000c6f7c7701b2c66aabbb39442aac06","sha256":"f939ca595a21346ac3d5a223cdb47c6a7eb691a148b690ae24b7a373904eca9f","sha512":"00da4d0e4a67aab1914824aa7f1049772efa1b01bc0b2832e98a2533309a5903d722152771af3e0deb91b9a2758793dd1a1e76a8ae55ebf9c4f0935bc7d03a64","ssdeep":"","tlshash":"7b1123ec6d9259427a6738114dcc811c8cbaaa53dc00cd68b45cd17cb0cb7ce5ce7682","first_seen":"2026-01-09T18:46:07.196227Z","last_seen":"2026-04-14T13:21:48.610962Z","times_seen":14,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.12.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:02.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.12.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-17b8b\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 14 Jan 2026 04:41:02 GMT\r\nage: 2389214\r\nx-served-by: cache-lga21956-LGA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 25, 340\r\nx-timer: S1768365663.513063,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33738\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-11T15:55:29.505978Z","times_seen":84493,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":73,"dns":33,"connect":13,"send":0,"wait":13,"receive":6,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 477387\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":477387,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29398)","md5":"9819833a24437aa7ce8b49c2b46b2b18","sha1":"0081cdef6b842825606c50cdfae93bb1b27b41fc","sha256":"1513479d96ec98712a96885bad27c016452cd25264e518f70c7b3ac2c697a3a2","sha512":"1ec521477641a136c122ebba114b01d166c591136b5fb03c6ee1e4abf8829d5f94b4c39e3bb6a847520ef1e747c0ed23b7c3f9dc7b30ef0c96f4b2d773000214","ssdeep":"6144:PkWcZ+l74EIsANa0Pqi9aSdg/YesItIAS:8WYS74dsANz9axG","tlshash":"e0a4189e73c6646652d6f478503f018ba8bf24a2b45c88a6f1d9cdf42d34a8a4173f7c","first_seen":"2026-01-09T18:46:07.303473Z","last_seen":"2026-04-14T13:21:48.622387Z","times_seen":14,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":76,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel.min.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel.min.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:54 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3351\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-08-11T16:58:35.808137Z","times_seen":43708,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/pagos-ggee-login.jpg","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/pagos-ggee-login.jpg HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:10 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 85062\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":85062,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x362, components 3","md5":"06a60e63d9c9fe4f81070f25fc72846f","sha1":"06bbedb38e11af2f0232bd1f96a190cf0b2df58b","sha256":"7dd881cfc2bdf14c7845bc23be0d9f696ea8302c38af3bd64eb4e85bb861d218","sha512":"57dca8a25148e94d67e924704d017ec5ab59d45c6e3e5893e03ac727f56b18ee125056c150bcccca44979bda8be56afcdf23ff41d931981e5ae329d1e2e3cdb6","ssdeep":"1536:EtlVZCwvW5RgHM/aoiozEse6hBE9lUKyCxKLusAFH2g6TFqMYC2EGEfcDunRfo29:E+Xbb/aoipsegBEXUKyCaA92BgxDEfcW","tlshash":"7683121de3ba23bac40242f3176e84bd06d99850448709cd5b3732f5e8db2e5d4b98ec","first_seen":"2026-01-09T18:46:07.305782Z","last_seen":"2026-04-14T13:21:48.646737Z","times_seen":14,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":701,"dns":0,"connect":0,"send":0,"wait":83,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/jquery-3.7.1.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/jquery-3.7.1.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:10 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 285314\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":285314,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-08-11T14:39:56.208753Z","times_seen":18017,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":439,"dns":0,"connect":0,"send":0,"wait":85,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js(1)","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/js(1) HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 278313\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":278313,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2361)","md5":"811e026925556526dd2a196af520e22d","sha1":"e750dc30d2ca9fb3454f79f9d4764665db7c4e0a","sha256":"d9df88d2903699396a13a314557c6269479b670be174330c011e39b4d834e2e7","sha512":"70fa9f1c7c6ffba761ab938ffee1a0567fdd3bcd0a95f53de91ce6b3ce27b666ee812903f1edba69fd085076d79cfdb77c82f2fb2855cb3b9a4b601b0b452561","ssdeep":"3072:LS1xWi7vgSpUYbROH0LuHDlWypBoPYz09RNt6Qr9J8zhodg/Ye8S36Uu06OWTPDt:Wl74EUYly0P3R9aSdg/YemDIS","tlshash":"ef44e7dd77d6b46683a27978403f000bb13b6d92f84cc894e182d6e92d74aa94277f7c","first_seen":"2026-01-09T18:46:07.185543Z","last_seen":"2026-04-14T13:21:48.608743Z","times_seen":14,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":458,"dns":0,"connect":0,"send":0,"wait":77,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.aglty.io/scotiabank-chile/librerias/canvas-framework/new-fonts/css/styles.css","fqdn":"cdn.aglty.io","domain":"aglty.io","tld":"io"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:03.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aglty.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 12:18:14 GMT","end":"Wed, 25 Mar 2026 12:18:13 GMT"},"fingerprint":{"sha1":"FE:FF:2C:93:FF:40:6D:EA:C7:D8:73:C1:3D:5E:D5:69:37:0E:D0:AB","sha256":"EF:36:88:75:D2:E5:2A:A6:F7:71:9D:C9:82:DA:37:76:E8:C3:74:74:F2:03:43:1A:6A:2C:31:18:03:18:A4:C1"}}},"request":{"raw":"GET /scotiabank-chile/librerias/canvas-framework/new-fonts/css/styles.css HTTP/1.1\r\nHost: cdn.aglty.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: Microsoft-IIS/10.0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Request-Context\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 05:30:05 GMT\r\nlast-modified: Thu, 06 Feb 2025 15:57:01 GMT\r\nx-aspnetmvc-version: 5.2\r\nx-ms-blob-cache-control: public, max-age=604800, s-maxage=604800\r\nrequest-context: appId=cid-v1:b6356dc1-e87f-411b-9bf6-6a5f0308e7de\r\ncontent-security-policy: default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline' *; object-src 'none';\r\nx-frame-options: SELF\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 14 Jan 2026 04:41:03 GMT\r\nage: 562719\r\nx-served-by: cache-chi-klot8100069-CHI, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 8304, 1\r\nx-timer: S1768365663.264114,VS0,VE1\r\nvary: Accept\r\nguid: scotiabank-chile\r\nregion: usa\r\nbackend: ssl_shield_chi_il_us\r\nurl: /scotiabank-chile/librerias/canvas-framework/new-fonts/css/styles.css\r\ncontent-length: 837\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":2779,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2778)","md5":"5ecb4d79d2795797369568802cf5ce16","sha1":"54c51f2cf211cc23e25944dd82a53fef1774063f","sha256":"bf5cb2ba12ad6f7a85b2c53185147b240107c094d6a6984aacbd34bdfee30c0c","sha512":"7dd4e8e93485c0e55239a0f772debbe5046027f19d8754660d081cac7afc0b6c43b089c06f96a273e3b5d3403b75aa2d777887aa456bce0b1916a079ebd517ba","ssdeep":"","tlshash":"0c511e115fa5a074f8ff8c8f74c9baa87a048812d0a78ebae565c509c9eb46b0340f58","first_seen":"2026-01-09T18:46:07.253648Z","last_seen":"2026-08-04T16:19:47.526606Z","times_seen":18,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":80,"dns":45,"connect":13,"send":0,"wait":15,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-roman.woff2","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-roman.woff2 HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css\r\nCookie: _gcl_au=1.1.801329264.1768365663\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24640\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24640, version 1.0","md5":"e6a8f3e520463da7019391cdeb0d9a3b","sha1":"13c2abaa9f5a988928966f388b8e6c07cc495aae","sha256":"6c6dd08c7bfbd7ba86c967b5b7b8ce6c4fb29cc1466b33dbe4762168ed492cdc","sha512":"73c38a6517239a4257f25c9296de711a3908cddab81ec6d825c696fb22473ae0f67733665f4467d990fc5d38656fd238ffa5a04b96d89569e5dc86ae88062fa9","ssdeep":"384:M0X6LB8+qX5m2gIRsO1rjJ+YBT7yvGmaCu7+H03FRDoQjJUToiN3vspnFJuAg0Uy:/Xb+wuIRZnavZaCuyH03F/OoNNFkAg1y","tlshash":"46b2e125b931c32cac1bda64ccf011b445de4bd967057b9abfddca787050a97d2d0a70","first_seen":"2026-01-09T18:46:07.219573Z","last_seen":"2026-04-14T13:21:48.590651Z","times_seen":14,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 49184\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49184,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7930d558200e92006b4f093323f86f46","sha1":"dcf5fc438d73006bc4b7dddb4d7b60681477bf23","sha256":"3dbe7a2378c33fcf79841d5486fcf011dcd658d93499af08165c39174806fb03","sha512":"f8eeaa6a29e0072bf42898ab399e3c86b53bca8efe1e24ba259bc757d43506c75dd963135cc81e005f9d8a7945529cbb4bb8af9847707be51e889140a4f1aed2","ssdeep":"384:aDtEo0/pDU/a4O47GZ4gMpAvisfTMFuLryGKZaQlPKCIq0CdsqM//X/fBY0:aDtEo0xU/a+e0gVQpbIqg5","tlshash":"cb23db68eac0155a72374d7c63a697c5db1900938e02877d7f8ae7408f7f06aa261fdc","first_seen":"2026-01-09T18:46:07.183812Z","last_seen":"2026-08-04T16:19:47.407222Z","times_seen":16,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-bold.woff2","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-bold.woff2 HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css\r\nCookie: _gcl_au=1.1.801329264.1768365663\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24904\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24904, version 1.0","md5":"56113c53e51a1bbd0eb434c788c15c17","sha1":"f56ece5e05c3aa8b40897a1004410a158fbbf49d","sha256":"582f66c7b1ca7fd8fb42815df9d80e69651e205bf9282e0e59803212ea0e1105","sha512":"291d68ef94f98e4e84c43a69e76a24bf1b5687e1b7f5f19aa5b8d331272ec1fa08a2662cb1fbdb5c33c10e555946ceac59b0eb25074cb9a6122fc2631fa86920","ssdeep":"768:JbZ6GNhjoMB0+azuL4jKlxPW24vIFvuRg:97Djoc0+aaMjK/Wj85","tlshash":"e1b2f1ee15e4e7778d838774994c1bea70b76a9bc19f4d0a60c30879a086d9f080a576","first_seen":"2026-01-09T18:46:07.255742Z","last_seen":"2026-04-14T13:21:48.593737Z","times_seen":14,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-6EDD061F8G\u0026gtm=45je61d0h2v890523752z86340201za20gzb6340201zd6340201\u0026_p=1768365662388\u0026em=tv.1~em.sXBNWMmuYYf8D4v5W3BTHcaP0cnGIzeg33cA2h6HAIs\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1972105578.1768365664\u0026ecid=1434116753\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~105391253~115616985~115938466~115938468~116910503~116988315~117041588\u0026sid=1768365663\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fkbrmimarlik.com%2Freactivar%2Freactivarscotiapassenlinea%2FSCOTIAPASSEMPRESASREACTIVA%2F%3F410425324%3D\u0026dt=Scotiabank%20-%20Portal%20Empresas\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2535","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:04.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-6EDD061F8G\u0026gtm=45je61d0h2v890523752z86340201za20gzb6340201zd6340201\u0026_p=1768365662388\u0026em=tv.1~em.sXBNWMmuYYf8D4v5W3BTHcaP0cnGIzeg33cA2h6HAIs\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1972105578.1768365664\u0026ecid=1434116753\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104573694~104684208~104684211~105391253~115616985~115938466~115938468~116910503~116988315~117041588\u0026sid=1768365663\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fkbrmimarlik.com%2Freactivar%2Freactivarscotiapassenlinea%2FSCOTIAPASSEMPRESASREACTIVA%2F%3F410425324%3D\u0026dt=Scotiabank%20-%20Portal%20Empresas\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2535 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kbrmimarlik.com/\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://kbrmimarlik.com\r\ndate: Wed, 14 Jan 2026 04:41:04 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":33,"dns":0,"connect":10,"send":0,"wait":17,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:19.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"POST /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 26\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"getstyle=7600.862195230165"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:18 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"a3ccc056ccd800499a1fc3a0fe8fddd8","sha1":"bb8b82670c733f151a84360dc6e88e390d337ac9","sha256":"bd9ffb3e93ae7e538c1148cf835d6a8c51837974348fdb1215482f5dbe599604","sha512":"d6e3d3982845967f586bfa0207b00070368a106bdf7e21b3021f384cb1dbc60f7826bf70bd528240a7e81779ccdd46915e22337f86f46e01294db2e7e0f2e265","ssdeep":"","tlshash":"a5a002981556f0012a2f8960dfa015c10e906d151d5b64c0d57bd30e667c5255aeb091","first_seen":"2026-01-09T18:46:07.200295Z","last_seen":"2026-04-14T13:21:48.595408Z","times_seen":14,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T04:41:01.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324= HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:01 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":76889,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35657)","md5":"2dc3a255d90588df549390b1108511d8","sha1":"08ddcdaa1b74fb56063184b5cebe5736a692b2e6","sha256":"0761cb47594fa30eb8d41264d9e76102013376b6d3518bc0469234513d25552f","sha512":"9003f8782d1e138b3b27bea21b36186509e78bf7b5156f05eef42ea942a83ba55f807dee50dd8a61dc7dfc4c4247adb790edbc840675821498afb27d4b1415c6","ssdeep":"1536:q49C2L9j/L4C2L9j/LwQWyF5d6MkHs9cYhX:MrV041","tlshash":"b9732bb142981bf9f2078bf892f13147322b30efaa955144d6e80ae4bb53cd48d6ed57","first_seen":"2026-01-09T18:46:07.291224Z","last_seen":"2026-04-14T13:21:48.620068Z","times_seen":13,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":286,"dns":130,"connect":72,"send":0,"wait":248,"receive":72,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/1517270105255357","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/1517270105255357 HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:50 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 87888\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87888,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (7091)","md5":"a45e2b7c9eca3d0a3e5f24bef37a56b6","sha1":"9e6fc6e45989bcc3b2bf6b7721b68df7d35d5a5f","sha256":"d7862f683a8ef03e7c31da4e90ee6270fb8486d0024abd4baf6fd7fbd89bc5e7","sha512":"1ef39ccec4d8bc2119bea8bef47ed61696b12ae263703c3e07df2098d83b0d028807c7b3ba5e8ef40fda4f2fe2d3df50aae4a5f87911e30e5e0a561aafe0668f","ssdeep":"1536:R7cpT6oj5+I9ZFKo1+eYaK4wpyscl9Y+ERJjjRWCpXH4/g:R7a9ZFKNeYaK4Zscl9X+x57","tlshash":"1183845621e4a177936ab96fef3f101b70f689427080cd20905cedec1bd96ed92329e7","first_seen":"2026-01-09T18:46:07.272954Z","last_seen":"2026-04-14T13:21:48.626684Z","times_seen":14,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/font-icon.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/font-icon.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 67599\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":67599,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a0b89ccdcca7ab177636c773b44a097e","sha1":"6cefb354669c58fa87f77b804ce7952ca575ab78","sha256":"a11e22189289078cd8f3d18f094c9e6c6b857fd154c95ace17266420249e1bda","sha512":"0ca06d4c9da61e6daf83c058a7ff00258a0faf43e7696644100b350f2401881af006e59954d9d6091998ed558db5b2edab6177dc13aff1085f259325664cc823","ssdeep":"768:t6kdV0q2tBvtF797L1Dm2xqNeMPbvd++ScHLWJaCSn+9JY:oq2/tFTm2xqYMPPhHLW7miq","tlshash":"e463d6e4ea9951dc7b32c402c741b648addaf121cee15d13f4af850d5fe262687c2eb8","first_seen":"2026-01-09T18:46:07.304655Z","last_seen":"2026-08-04T16:19:47.473571Z","times_seen":16,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com.br/pagead/1p-user-list/1046484911/?random=1743438280387\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0z86340201za201zb890523752\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887799~102926062\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026label=8bGuCNbe11wQr6-A8wM\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026_tu=Cg\u0026data=google_custom_params%3Dwindow.google_tag_params\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzM5ty5YELWXDEZN9KKrBPELbyFDAsuds_Ega6-2FoBqPJ1L7Xj\u0026random=1140432296\u0026rmt_tld=1\u0026ipr=y","fqdn":"www.google.com.br","domain":"google.com.br","tld":"com.br"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com.br","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:58:15 GMT","end":"Wed, 25 Feb 2026 15:58:14 GMT"},"fingerprint":{"sha1":"29:32:5A:15:FC:6B:81:8A:11:2D:6E:23:E2:15:33:8D:65:2B:02:42","sha256":"25:26:B2:66:B2:15:17:5B:E3:0C:6B:97:F4:07:CA:A5:92:A4:6B:5B:98:FF:59:F1:4C:62:83:90:C3:F4:9E:55"}}},"request":{"raw":"GET /pagead/1p-user-list/1046484911/?random=1743438280387\u0026cv=11\u0026fst=1743436800000\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be53r0z86340201za201zb890523752\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887799~102926062\u0026u_w=1920\u0026u_h=1080\u0026url=https%3A%2F%2Fwww.scotiabankchile.cl%2Flogin-banca-empresas\u0026label=8bGuCNbe11wQr6-A8wM\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Login%20Empresas\u0026npa=0\u0026pscdl=noapi\u0026auid=1756999506.1743436806\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B134.0.6998.118%7CNot%253AA-Brand%3B24.0.0.0%7CMicrosoft%2520Edge%3B134.0.3124.83\u0026uamb=0\u0026uam=\u0026uap=Windows\u0026uapv=15.0.0\u0026uaw=0\u0026fledge=1\u0026_tu=Cg\u0026data=google_custom_params%3Dwindow.google_tag_params\u0026rfmt=3\u0026fmt=3\u0026is_vtc=1\u0026cid=CAQSKQCjtLzM5ty5YELWXDEZN9KKrBPELbyFDAsuds_Ega6-2FoBqPJ1L7Xj\u0026random=1140432296\u0026rmt_tld=1\u0026ipr=y HTTP/1.1\r\nHost: www.google.com.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 14 Jan 2026 04:41:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-11T17:57:46.856117Z","times_seen":1027477,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":218,"dns":1,"connect":21,"send":0,"wait":23,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:54 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3031\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3031,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"679e846b6abfff1d75afc025faf06576","sha1":"11832bd3047ffef076cfcb9d6b13711829cc27a1","sha256":"6561779cafac70782489f332d6298efda90ab6bdb24f0a89efcbc0d8c38af91d","sha512":"bc28763ebf7a5a97ddaea3a8277979b48fa00f6b0e6fd7f999879eb4f0ac5f52aaf833258cfb81a40b362afa1bbac5eed7981315d0117d279d3e3d4017dd3379","ssdeep":"","tlshash":"85517a04f7cd017912fa367f481ab7c8e25d08738d0509a5fc7d86b419fda9b8531a2a","first_seen":"2026-01-09T18:46:07.229539Z","last_seen":"2026-08-04T16:19:47.317751Z","times_seen":16,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":269,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.theme.default.min.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.theme.default.min.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:54 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1013\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-08-11T16:58:35.802222Z","times_seen":27324,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":328,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f.txt","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/f.txt HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4827\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/plain\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (4827), with no line terminators","md5":"f08551e2dcd99094ddcd1e82169ffaba","sha1":"818dddb4d60e7ebd122d3562c084f2de50816ccf","sha256":"4147e57280268b27556da1456d2342e2aa9866e3f50c2af6ec847f1b15f06f6f","sha512":"4e9c2477debe2a8dcb549bc1566b39b0992e66d7ab0f16396b1d85adf90435679b6b4d02e43881dd236a879dbd40cad61d7250bce5b136ca5d16cd9cf122acd6","ssdeep":"96:Eg1BcYm9PbxGKVk54Ele/3V6oGh1fcO8pdnfX8pdnfM:EfLoh1wVg1j8pZfX8pZfM","tlshash":"05a1a49ab3a4b257d29364b1672fa60bf4397c53ccc8e404f661c8a49ca8adf1587f41","first_seen":"2026-01-09T18:46:07.251175Z","last_seen":"2026-04-14T13:21:48.605435Z","times_seen":14,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":532,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6EDD061F8G\u0026l=dataLayer\u0026cx=c\u0026gtm=45He53q1v6340201za204\u0026tag_exp=102482433~102788824~102803279~102813109~102887800~102926062~102975948","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=G-6EDD061F8G\u0026l=dataLayer\u0026cx=c\u0026gtm=45He53q1v6340201za204\u0026tag_exp=102482433~102788824~102803279~102813109~102887800~102926062~102975948 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Jan 2026 04:41:03 GMT\r\nexpires: Wed, 14 Jan 2026 04:41:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 160257\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":521495,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29563)","md5":"b535e4afd59a008b89a57bfcad1273d3","sha1":"ba0fb7b907c78d1bb2d57db46a9733cee5be81a8","sha256":"1c5d3c997198c5c722672f2740824f3a2419cd4ac4b35a5fdaf3e906b13efd5a","sha512":"7872f189cbf6cf760c45e3e3fa236799d8cc3d6133db1af3601678026713e83aa852e92716aa0e4fea610ae5b9a849f5f2825a52db52d7514910d8f701d7bfec","ssdeep":"6144:PLk0QZv3l8xwWY2sHK8RwrCO4HD1Iy2ofUIDYdN+Ma+K:grj8xgZK6wQfUc","tlshash":"81b4089f73c5642692daf468502f02cba87b25a2b49cc8a7b1d9ccf02d3459a0167f7d","first_seen":"2026-01-14T04:41:59.649732Z","last_seen":"2026-01-14T04:41:59.649732Z","times_seen":1,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":188,"dns":1,"connect":7,"send":0,"wait":37,"receive":24,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-roman.woff2","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-roman.woff2 HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css\r\nCookie: _gcl_au=1.1.801329264.1768365663\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24640\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24640, version 1.0","md5":"e6a8f3e520463da7019391cdeb0d9a3b","sha1":"13c2abaa9f5a988928966f388b8e6c07cc495aae","sha256":"6c6dd08c7bfbd7ba86c967b5b7b8ce6c4fb29cc1466b33dbe4762168ed492cdc","sha512":"73c38a6517239a4257f25c9296de711a3908cddab81ec6d825c696fb22473ae0f67733665f4467d990fc5d38656fd238ffa5a04b96d89569e5dc86ae88062fa9","ssdeep":"384:M0X6LB8+qX5m2gIRsO1rjJ+YBT7yvGmaCu7+H03FRDoQjJUToiN3vspnFJuAg0Uy:/Xb+wuIRZnavZaCuyH03F/OoNNFkAg1y","tlshash":"46b2e125b931c32cac1bda64ccf011b445de4bd967057b9abfddca787050a97d2d0a70","first_seen":"2026-01-09T18:46:07.219573Z","last_seen":"2026-04-14T13:21:48.590651Z","times_seen":14,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fkbrmimarlik.com%2Freactivar%2Freactivarscotiapassenlinea%2FSCOTIAPASSEMPRESASREACTIVA%2F\u0026scrsrc=kbrmimarlik.com\u0026frm=0\u0026rnd=1065329783.1768365663\u0026dt=Scotiabank%20-%20Portal%20Empresas\u0026auid=801329264.1768365663\u0026navt=n\u0026npa=0\u0026gtm=45He53q1v6340201za204\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887800~102926062~102975948\u0026tft=1768365663231\u0026tfd=1530\u0026apve=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fkbrmimarlik.com%2Freactivar%2Freactivarscotiapassenlinea%2FSCOTIAPASSEMPRESASREACTIVA%2F\u0026scrsrc=kbrmimarlik.com\u0026frm=0\u0026rnd=1065329783.1768365663\u0026dt=Scotiabank%20-%20Portal%20Empresas\u0026auid=801329264.1768365663\u0026navt=n\u0026npa=0\u0026gtm=45He53q1v6340201za204\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=102482433~102788824~102803279~102813109~102887800~102926062~102975948\u0026tft=1768365663231\u0026tfd=1530\u0026apve=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Wed, 14 Jan 2026 04:41:03 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://kbrmimarlik.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":109,"dns":0,"connect":21,"send":0,"wait":30,"receive":1,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/android-icon-192x192.png","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:04.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/android-icon-192x192.png HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS2.1.s1768365663$o1$g0$t1768365663$j60$l0$h1434116753; _ga=GA1.1.1972105578.1768365664\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13325\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1f1272e1511a90ad4d4a8f4209802e74","sha1":"19551ba0f94ceb3359ab88dd5f6a52e2d087b6b2","sha256":"03c02718bc43d7dc50cf5e8dfca7f1f7e1527191916434a070f60f501791b5c2","sha512":"76543b21bef39fbbe8906ea005f36bbc5686d12b30963700cbac70c1e9c1ea44651a7f43a5d9ac4f0f76f352ebdc4a21de115dadf611d28eee2fc3676396e1f3","ssdeep":"192:UvSWiN3HAI3QOzAgNz8xYYd4ud32HUyTY+Z+Vj9wrffEz4sqkMNvhsu/i8Y5MU9G:blN3Hflmxzd3VypocfvCb8Y5r9ji","tlshash":"3b52c04a1fb498d90a0ea94bd4bfcb99f1757e93291f11bea8440adb614770820453df","first_seen":"2026-01-09T18:46:07.262325Z","last_seen":"2026-04-14T13:21:48.647601Z","times_seen":14,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel.min.js.baixados","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel.min.js.baixados HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:25:56 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 44175\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":44175,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"7b4d831221a14eaa81ec303f0c6bf7be","sha1":"74ba283bb7f418ff407132bed30bf6268cdbb1a8","sha256":"18c2a938a30bf80b65d47113db3f7b8a0dea2e94f04592b0ca3c2738e4c10fa2","sha512":"c60ed49ac1fb1f385f0ff39a3cd29f69fbdb30278cc5c7eb21cf770245d35a69130245e7e8383f8316966cd5750d954309d986897aaabaaedf70c50d6ff256bb","ssdeep":"768:OCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:VITMFC4dbMVRSGcgRDV","tlshash":"a0137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-11T03:03:59.84901Z","times_seen":308,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":327,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-bold.woff2","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:03.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/frutigerltforbns-bold.woff2 HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/images/fonts.css\r\nCookie: _gcl_au=1.1.801329264.1768365663\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 03 Feb 2025 20:42:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24904\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24904, version 1.0","md5":"56113c53e51a1bbd0eb434c788c15c17","sha1":"f56ece5e05c3aa8b40897a1004410a158fbbf49d","sha256":"582f66c7b1ca7fd8fb42815df9d80e69651e205bf9282e0e59803212ea0e1105","sha512":"291d68ef94f98e4e84c43a69e76a24bf1b5687e1b7f5f19aa5b8d331272ec1fa08a2662cb1fbdb5c33c10e555946ceac59b0eb25074cb9a6122fc2631fa86920","ssdeep":"768:JbZ6GNhjoMB0+azuL4jKlxPW24vIFvuRg:97Djoc0+aaMjK/Wj85","tlshash":"e1b2f1ee15e4e7778d838774994c1bea70b76a9bc19f4d0a60c30879a086d9f080a576","first_seen":"2026-01-09T18:46:07.255742Z","last_seen":"2026-04-14T13:21:48.593737Z","times_seen":14,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/iconos-canvas.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/iconos-canvas.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.css\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/iconos-ilustartivos-canvas.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:04.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/iconos-ilustartivos-canvas.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.css\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:03 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/static/service_worker/53k0/sw_iframe.html?origin=https%3A%2F%2Fwww.scotiabankchile.cl","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/saved_resource.html","date":"2026-01-14T04:41:05.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /static/service_worker/53k0/sw_iframe.html?origin=https%3A%2F%2Fwww.scotiabankchile.cl HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"analytics-container-tag-serving\"\r\nreport-to: {\"group\":\"analytics-container-tag-serving\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/analytics-container-tag-serving\"}]}\r\nservice-worker-allowed: /static/service_worker\r\ncontent-length: 1476\r\ndate: Wed, 14 Jan 2026 04:41:05 GMT\r\nexpires: Thu, 14 Jan 2027 04:41:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 20 Mar 2025 08:58:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3501,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (815)","md5":"147fd3b00c22ba9c939712e9213c24ca","sha1":"3b48369b86fa0574f35379aacd1f42cc9c98a52b","sha256":"70f5b11c1870cf90201a6d5f770ca318a3fa5827c74a8765ede22b487f7d4532","sha512":"e8419a71232edac8fd131446777f7d034b3171efe07b3267479b439e4982650db65a0d1ddc9f516315d5ed1b01ecfd2f7eb55d75d44aa51ee0ad494d441586d2","ssdeep":"","tlshash":"0771c98c7651e46502a255f3932f3901b0aa1564f00ef0ecb1799cd2bbb9d5b03a7bbc","first_seen":"2024-10-24T10:24:18.679357Z","last_seen":"2026-05-25T22:02:06.241943Z","times_seen":249,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=","date":"2026-01-14T04:41:10.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"POST /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/_controle/wp-admin.php HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 26\r\nOrigin: https://kbrmimarlik.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/?410425324=\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"getstyle=88629.09349357833"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:09 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"a3ccc056ccd800499a1fc3a0fe8fddd8","sha1":"bb8b82670c733f151a84360dc6e88e390d337ac9","sha256":"bd9ffb3e93ae7e538c1148cf835d6a8c51837974348fdb1215482f5dbe599604","sha512":"d6e3d3982845967f586bfa0207b00070368a106bdf7e21b3021f384cb1dbc60f7826bf70bd528240a7e81779ccdd46915e22337f86f46e01294db2e7e0f2e265","ssdeep":"","tlshash":"a5a002981556f0012a2f8960dfa015c10e906d151d5b64c0d57bd30e667c5255aeb091","first_seen":"2026-01-09T18:46:07.200295Z","last_seen":"2026-04-14T13:21:48.595408Z","times_seen":14,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel(1).min.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:02.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/owl.carousel(1).min.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:10 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3351\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-08-11T16:58:35.808137Z","times_seen":43708,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":386,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/iconos-canvas.css","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:03.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/iconos-canvas.css HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/canvas-library.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:02 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/874209459.html","fqdn":"kbrmimarlik.com","domain":"kbrmimarlik.com","tld":"com"},"ip":{"addr":"159.253.45.38","port":443,"asn":51559,"as":"Netinternet Bilisim Teknolojileri AS","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html","date":"2026-01-14T04:41:05.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbrmimarlik.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 15:58:34 GMT","end":"Thu, 26 Mar 2026 15:58:33 GMT"},"fingerprint":{"sha1":"D0:51:D9:65:FE:A7:46:11:5C:32:C4:D3:B3:69:E2:13:29:79:51:FD","sha256":"91:6A:65:6A:F6:86:32:A9:C3:EE:7E:1F:A3:E4:E9:21:E8:50:D7:71:94:6A:F8:4B:04:B0:5C:86:E6:DD:0F:0F"}}},"request":{"raw":"GET /reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas_files/874209459.html HTTP/1.1\r\nHost: kbrmimarlik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kbrmimarlik.com/reactivar/reactivarscotiapassenlinea/SCOTIAPASSEMPRESASREACTIVA/login-empresas.html\r\nCookie: _gcl_au=1.1.801329264.1768365663; _ga_6EDD061F8G=GS1.1.1768365664.1.0.1768365664.0.0.1592781763; _ga=GA1.1.1972105578.1768365664; PHPSESSID=c8243befdb840b094abc6f7bf1d3f756\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 14 Jan 2026 04:41:04 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Mar 2025 17:26:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 814\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":814,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (651)","md5":"27c58942a052d81b341a6cc3488c51f0","sha1":"ffeb51337731850fbbe4e241330ced3d3780b882","sha256":"12d78bfac8107f4b8d073d1a74d6eec97af559a2c5227d13cd3362813aae1ff3","sha512":"dae6a76602d55daab93582c9989d7ec377ed1bf4395dc8a9428d210b332b3f9bbfa8af47480c1222a5cadb07e30b73a25613b52894a68ca84bdb747847f23870","ssdeep":"","tlshash":"5d0141ac5d86698375a7280058cc821c8dfea697d904cd68e45ce1bcb4c778d98e7a82","first_seen":"2026-01-09T18:46:07.227562Z","last_seen":"2026-04-14T13:21:48.609974Z","times_seen":14,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-14","alert":"Phishing Block","trigger":"kbrmimarlik.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"kbrmimarlik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}