{"report_id":"e6536d79-6678-41de-9476-ff7ce22091df","version":6,"status":"done","tags":[],"date":"2026-02-26T15:03:17Z","url":{"schema":"http","addr":"m.padisahabet.com","fqdn":"m.padisahabet.com","domain":"padisahabet.com","tld":"com"},"ip":{"addr":"104.21.21.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"m.padisahabet.com/","fqdn":"m.padisahabet.com","domain":"padisahabet.com","tld":"com"},"title":"Padişahbet - Güncel Padişahbet Resmi Giriş ve Kayıt 2026","dom":{"size":15288,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (316)","md5":"8444454e7b3c9bc99e688ab384467ca3","sha1":"72087c5a704d054e3c48e65456632df957d5c0db","sha256":"03251cdb6579b55ae75c4e9d918b09e7082251c394957a83c08e6c3db84d081f","sha512":"b063f83de3173b884631ef47df72db2f6f295291c947e728b44c6277f6ca3548267e307d62280131c6d6a634971b973cd53d1710a2f350cf8ab92683bf8d6dac","ssdeep":"192:hfH81mSn1NhiSiyT1g1ypqyO8QE1y2fZyGTy9SYyc30y6PyT8y5Cymb3oyqgbV/p:hfH50AvsLcgRvGf9N4","tlshash":"a162b64b8ae10c1b1a22a2d441f77713a55690478a78fc9d7f0e4a1f1f8daebc5a331d","dom_hash":"domhashb4d5e8c10e559ce1d9d2bfcd1f28da9a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.padisahabet.com","fqdn":"m.padisahabet.com","domain":"padisahabet.com","tld":"com"},"ip":{"addr":"104.21.21.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-02T15:03:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"m.padisahabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"m.padisahabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"m.padisahabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"files.sikayetvar.com","ip":{"addr":"104.26.8.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-03-10","domain_rank":2749629,"first_seen":"2019-03-07T11:47:00Z","last_seen":"2026-02-25T01:11:57.317113Z","alert_count":0,"request_count":1,"received_data":8506,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"m.padisahabet.com","ip":{"addr":"104.21.21.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":2,"received_data":56540,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:8.3.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":1,"received_data":455794,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.padisahabet.com/","fqdn":"m.padisahabet.com","domain":"padisahabet.com","tld":"com"},"ip":{"addr":"104.21.21.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b908d971457f50b7eaf2a680f06e08be","sha1":"d12e6b0921c740fed179fe5562fd5b0bf1da37bc","sha256":"d33dc19c2f052b937ed24ff192d69fad3181c75ad4de49668e3cc7d54d44e501","sha512":"46759010b8388da83ecdc81a867a4a796224be3f8f5a7f46ec67184be973f15d6bac7f9264ae93e0e310d8b6dd96ad73ce9156e57d492abc1aa2be94a30559f1","ssdeep":"","tlshash":"adc02b8c311b0c7042fb27408b7fb700b802322894d4f931480e23089d30e13d7648d0","size":153,"data":"","first_seen":"2026-02-26T15:03:22.290526Z","last_seen":"2026-02-26T23:58:20.060062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9W3014R4CC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b40fc33eed3e764067132e61db56ccc","sha1":"8dafa82db5972f5fcbb64eb5d1cb6414b41615a2","sha256":"ad01186c1374c2e8f206cb2ac2fada7d6c54eb5a66dc764ac285bb074bafd8eb","sha512":"7fce5d1b577b38e40b11434caf1d917024ad1d3bfb2d6cbe4708f009fd21b72a3cb4fddd9597a75c2abae46f482bc8142367cdd59c88f567508ba374f01b7704","ssdeep":"6144:nLkI3dclXYZfoDbvGPR8JLgoQ99orRUO5N8X1XgyznX6:Ao+lXYZfoP6R81N8l3G","tlshash":"f0a409ce73d674225396f478903f018ba57b64a2b48cc89af189cce42d7469a4277f7c","size":455190,"data":"","first_seen":"2026-02-26T15:03:22.289628Z","last_seen":"2026-02-26T17:30:37.887562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"files.sikayetvar.com/lg/cmp/15/153996.png?1587360860","fqdn":"files.sikayetvar.com","domain":"sikayetvar.com","tld":"com"},"ip":{"addr":"104.26.8.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.padisahabet.com/","date":"2026-02-26T15:02:56.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sikayetvar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 10:32:24 GMT","end":"Fri, 10 Apr 2026 11:32:07 GMT"},"fingerprint":{"sha1":"57:47:DF:F8:18:42:5C:CC:11:9B:2E:E9:37:13:73:3A:1F:75:3A:14","sha256":"9D:AB:3B:97:9B:E2:B3:B6:B4:72:16:5C:7A:EF:5D:6E:A2:FC:F9:2A:CC:CF:6A:7B:29:E3:20:F0:10:1C:53:89"}}},"request":{"raw":"GET /lg/cmp/15/153996.png?1587360860 HTTP/1.1\r\nHost: files.sikayetvar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.padisahabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Feb 2026 15:02:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 7309\r\nx-guploader-uploadid: AGQBYWzugpSJYka8hNIZKBAzpdDF5qT0QEe_f___Gbxd2o-ucwi5-j6faXBxJ8mfkVYiTZFPD8wnUZk\r\nexpires: Thu, 26 Feb 2026 12:05:27 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 20 Apr 2020 05:34:19 GMT\r\netag: \"f899468a7674f35f92764c4f9e4489df\"\r\nx-goog-generation: 1587360859630309\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8420\r\nx-goog-hash: crc32c=LS7cZQ==, md5=+JlGinZ081+SdkxPnkSJ3w==\r\nx-goog-storage-class: REGIONAL\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=8420\r\nstrict-transport-security: max-age=15552000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nage: 14249\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lay%2FzHzU7p3%2F4DBXfuINTZfgI1TnO1bNIsyTS%2BiINN46WMxT3kgOWnbrUalpr3WP6i41U2C3UYaAoA39YgP4CUP4HY3JbyX7uNOz52sStzqJqT0%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9d40538b2fbee0de-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 222, 8-bit/color RGBA, non-interlaced","md5":"da0e64f91cedce4a82abe9a828f55695","sha1":"a5c572fa7fee9c16b349c49bfe6ce5433a17de5c","sha256":"2fd67cb70a77cf181016379417b01efca3f032680b562f910a167feb7170a34d","sha512":"e2f12329fcabbd4076f0f3199203d41a6d32bebcada0c61415676030be18b359c7d83ca48c6f73f5eff24ce2d149e8d53f199bd82c768a00cc7a333f675681e0","ssdeep":"96:P5N4Um+scQucxTjkmMCwp/lxK1cNv578/nEEoNywX5p/qjLEd/ZSb2t+BAc7e3ep:Pz4URQHjxG41oEnE3kLy+2w7eue9xUXR","tlshash":"c2e1aeb708d87e6ddc80b9f5fdde0965346414a580687aafb0cc10a924137ba200b7fb","first_seen":"2026-02-26T15:03:22.286454Z","last_seen":"2026-05-12T17:21:38.133149Z","times_seen":3,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":115,"dns":83,"connect":8,"send":0,"wait":40,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.padisahabet.com/icon.png","fqdn":"m.padisahabet.com","domain":"padisahabet.com","tld":"com"},"ip":{"addr":"104.21.21.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.padisahabet.com/","date":"2026-02-26T15:02:56.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padisahabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 23:40:38 GMT","end":"Tue, 26 May 2026 23:40:37 GMT"},"fingerprint":{"sha1":"DD:CC:DF:8D:1C:F3:AC:2D:F2:86:22:CC:5A:38:9D:F2:61:96:0B:2D","sha256":"8F:00:5B:79:F5:EF:99:8A:A1:16:3B:24:67:D3:C7:30:BF:48:4B:A7:3B:9F:AA:4E:05:1D:37:36:5F:00:B3:53"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: m.padisahabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.padisahabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Feb 2026 15:02:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 39387\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 05 Mar 2026 01:32:05 GMT\r\nlast-modified: Thu, 26 Feb 2026 01:18:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 48650\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1UbEI1r4RycLev1QFbqJH1t8wXEK5iT9WeC7%2BFwy8wFyWqv8BQTku5W84hPluk0u8%2B4EWmjxcY2DbQXWyxZJEEMpwNs%2FVACKSdcdWHhc0Xi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d40538c4db8527d-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, interlaced","md5":"99da201d58d219d2adc80b71a457f206","sha1":"00605480011bc401e9aa65f1556cc09678568578","sha256":"c5f2433004080243d96e9e4a528ef02191d90beb7702e25cd85bc419e5e5d6e4","sha512":"a23e706103baca9700226294bffda449928b0f762f6e0ce12786361dd8d147829db0f00184ca1960f2512086b004f8602f11e53f24ec490ffe07d1f9c9c44187","ssdeep":"768:9UwWUnh7Lm7jijb9xJv2uYtEvJcj1Xsi4UGAbHbyc:9Uw1ajKBzOlecj10UVb7yc","tlshash":"fc03f103fb0bb2899f029b56b98b432150db9d1d7b4e5a8ebacc9d14f4bc0c89697490","first_seen":"2026-02-26T15:03:22.287507Z","last_seen":"2026-04-15T09:04:30.205639Z","times_seen":13,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"m.padisahabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"m.padisahabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"m.padisahabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.padisahabet.com/","fqdn":"m.padisahabet.com","domain":"padisahabet.com","tld":"com"},"ip":{"addr":"104.21.21.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-26T15:02:56.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padisahabet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 23:40:38 GMT","end":"Tue, 26 May 2026 23:40:37 GMT"},"fingerprint":{"sha1":"DD:CC:DF:8D:1C:F3:AC:2D:F2:86:22:CC:5A:38:9D:F2:61:96:0B:2D","sha256":"8F:00:5B:79:F5:EF:99:8A:A1:16:3B:24:67:D3:C7:30:BF:48:4B:A7:3B:9F:AA:4E:05:1D:37:36:5F:00:B3:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.padisahabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Feb 2026 15:02:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.28\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0,pre-check=0\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVij3JALCLF18QEwUX2MUlTDRUBqnY%2BJTQpTCmLdha47J%2BR9iKfYqC1ftv2AA%2Fs9NLAKecS%2BlH9zATej%2FRDqQ%2FhXZKGnXXWoiEgzZrHwqJn4\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d405388fc7bf351-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15685,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (316), with CRLF line terminators","md5":"527577ad7c6c5e961c6852281ae74df4","sha1":"a07fbe59c579e86f5576f31de47484664ee6632a","sha256":"87c543b755be4d8b3da69ee2b805554b0d183884ef94a606648554dd7deb9069","sha512":"7e4a2134a2efa2a574622956d13b3386f4029aa3068faee9b53d890cc70650f62a48f44367bf4f0242859c7eb9c97e62f52ae47203b8095d1c0355f8afe87157","ssdeep":"192:YBK1m2GKa5TeEMg8ugXSXE81GYnj+BFXGprvesuk9xu1Jgx+uez604d+zzvKfJAZ:YBfyrQvongQXA426t","tlshash":"8462950bdac14c1b0632a39495b35717fa07129b8264d89fbd3e562f1fb5ae2c243b1d","first_seen":"2026-02-26T15:03:22.288541Z","last_seen":"2026-02-26T15:03:22.288541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":65,"dns":36,"connect":8,"send":0,"wait":94,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"m.padisahabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-26","alert":"Phishing Block","trigger":"m.padisahabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"m.padisahabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9W3014R4CC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.padisahabet.com/","date":"2026-02-26T15:02:56.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-9W3014R4CC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.padisahabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Feb 2026 15:02:56 GMT\r\nexpires: Thu, 26 Feb 2026 15:02:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150595\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455190,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"6b40fc33eed3e764067132e61db56ccc","sha1":"8dafa82db5972f5fcbb64eb5d1cb6414b41615a2","sha256":"ad01186c1374c2e8f206cb2ac2fada7d6c54eb5a66dc764ac285bb074bafd8eb","sha512":"7fce5d1b577b38e40b11434caf1d917024ad1d3bfb2d6cbe4708f009fd21b72a3cb4fddd9597a75c2abae46f482bc8142367cdd59c88f567508ba374f01b7704","ssdeep":"6144:nLkI3dclXYZfoDbvGPR8JLgoQ99orRUO5N8X1XgyznX6:Ao+lXYZfoP6R81N8l3G","tlshash":"f0a409ce73d674225396f478903f018ba57b64a2b48cc89af189cce42d7469a4277f7c","first_seen":"2026-02-26T15:03:22.289628Z","last_seen":"2026-02-26T17:30:37.887562Z","times_seen":2,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":192,"dns":64,"connect":21,"send":0,"wait":43,"receive":61,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}