{"report_id":"f18c1c59-1f6c-47df-888a-0bcc0f59736e","version":0,"status":"done","tags":[],"date":"2026-08-06T00:39:57Z","url":{"schema":"http","addr":"galabet.kesingirisadresi.com/","fqdn":"galabet.kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"galabet.kesingirisadresi.com/","fqdn":"galabet.kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"title":"Galabet Güncel Giriş Adresi - Giriş","dom":{"size":54883,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1554)","md5":"e8ee59b74c8eb2589fbc9e79a57a0b73","sha1":"859a3a83f5e1490693fd23edfb3a50644e41a61b","sha256":"4b6f48d3e72b9b1dde35552a6c59e7bfbf6953594f9472e9de730eb04d71430d","sha512":"043e6439a1e21ef9db85045572780f165a60fce3dbb3382a6443c36223910cd9163e5853ad81c5808bbb2dfdeb200293daf6a7f4d2c3271a7e294c8a60760c19","ssdeep":"384:XpvDBW0UxE/qeGS084ECtBvnccYPqyOqaegk0yxEZoeGWw44DwvY8u2mva7/z:XpvtLcen0849EcSqypqpuejw44Ditbz","tlshash":"7b33faa36ef9243f032391d3b256163eafa7820bd9565406b6bd8b580fa7d87dc5310c","dom_hash":"domhash1aeff0d80405f95bbc035198f5274a81","first_seen":"2026-08-06T00:39:58.755223Z","last_seen":"2026-08-06T00:39:58.755223Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabet.kesingirisadresi.com/","fqdn":"galabet.kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T00:39:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"kesingirisadresi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"galabet.kesingirisadresi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kesingirisadresi.com","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-30","domain_rank":0,"first_seen":"2026-08-06T00:31:25.229973Z","last_seen":"2026-08-06T00:31:25.229973Z","alert_count":20,"request_count":4,"received_data":123181,"sent_data":2124,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":15,"received_data":566172,"sent_data":8995,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arkaplan.aatoolz.one","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-07-11T15:35:18.606915Z","last_seen":"2026-08-04T15:18:37.75951Z","alert_count":0,"request_count":8,"received_data":712643,"sent_data":4504,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"nostatz.vip","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-04T12:10:09.883563Z","last_seen":"2026-08-06T00:31:25.790122Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":643,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"ticky.aatoolz.one","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-07-14T12:24:07.349402Z","last_seen":"2026-08-04T15:18:37.632219Z","alert_count":0,"request_count":4,"received_data":21504,"sent_data":2147,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":20053,"sent_data":621,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"galabet.kesingirisadresi.com","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-30","domain_rank":0,"first_seen":"2026-08-06T00:31:58.186844Z","last_seen":"2026-08-06T00:31:58.186844Z","alert_count":5,"request_count":1,"received_data":52551,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ticky.aatoolz.one/flow.js","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f2dac3670e072b9ba4b7a70851fd65f","sha1":"60353ff763707fbf432aadf19807498dcb7839af","sha256":"f425f140fa5a47920838caec85bdb8c4ccce72a3459e2b96fb520772c95056af","sha512":"ba9841e5ad9b7777d89b360bcd0f51ca59d8ddfebb77ce57135009fd95b6b19e47791530e296945c16dbd1baedd68eee6f735dd537264bfd2480569292b99656","ssdeep":"96:7OYkSBzt1B7cRMVkrhBvfAqnKCwoIZejCDDvC/06ta:yYkSBfbILvzCjwjC/MI","tlshash":"4ba1b63bbe7300bc6a2f805f66bee569316400235403ec61b46ce4199fd0d66167bafc","size":4899,"data":"","first_seen":"2026-07-14T12:24:12.283168Z","last_seen":"2026-08-06T04:06:19.733254Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb=","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc693e16779a0a40a84525ed04127d2","sha1":"7c47fbf9df0313a056c9d32f60cb12e11b70278a","sha256":"1e423362fedf93fbecec036e3f063612d49f7bc4ed6836e63ae6a4355e9d24de","sha512":"12478fa231439bffceb7a951fe843cd84b890a6a4b942336d46297dc6df8621280d8a6e41ac6b8bc39595c01c40a9098bf86472fcd243aaf32da05a6e53dde7f","ssdeep":"","tlshash":"17f081f2f5719196144140094e05edbd5a12f44faf621148ffd4652c575e81d68172a5","size":550,"data":"","first_seen":"2026-08-06T00:39:58.791718Z","last_seen":"2026-08-06T00:39:58.791718Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb=","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"75c9f0695486bfb9fbb15106588e3360","sha1":"26d9b4b872811d35b3d0d9a15d927d52834581b9","sha256":"5fb16c666e76888a903a932e469de71ba00471b1151f86164c507c6a6955d8b9","sha512":"284cf46c21199d3e8df4b66cf7816524c73e8e657ba5b08fd786bda425f491adeb5117bdb893210c9352e3e47f4202ef565dfc1483960666d470bcf6b7f67d3e","ssdeep":"","tlshash":"abf041f3a9605118544741088706ecbc1b13fc4eae211008fb94a23c408ea2f28673ac","size":572,"data":"","first_seen":"2026-08-06T00:39:58.773982Z","last_seen":"2026-08-06T04:06:19.691632Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb=","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fc2c03cdbd7986d007969555e852578","sha1":"3f3ac36f85d5518400257903f2a178f6fd1bee05","sha256":"8e593a5317a17fc009b55da4d7d98bed027819c9f1c4f9a3648bedd02a5cf920","sha512":"399e243e9c08080cacc358961f58dcaac2eb526601722f6a4115ea434ee2518bfd9442e31c63cbf160ba3dc64bfcf35a70120bc483e3042576bae03432df2a7d","ssdeep":"","tlshash":"13f0acb2e5b19296584541064e08fdac1a02f40f6f621048eb9cb56c865e81e68372e5","size":579,"data":"","first_seen":"2026-08-04T15:18:42.261938Z","last_seen":"2026-08-06T04:06:19.727855Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb=","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"718b3ef6e707a0544285b8251da01e21","sha1":"a510e4fca3456e892bb16a028f0b93ba03e6b0ec","sha256":"328210c59dc8c6e7be99e65216d45a952051d555685b208a02176c2343139962","sha512":"e60dc8e06dacb544b644b9b8953407ee3078dfe283ed569f5de044005331fd54c3c73bd419f4d43b5cf86bf9230cd857f1ad4fd6696ca9e5a9b0245c386e36cc","ssdeep":"","tlshash":"c8f08bf2a97192660451800a4a09fdac2a12f40faf630048fb98666d965e82d2d2b2a5","size":547,"data":"","first_seen":"2026-07-28T12:52:42.790509Z","last_seen":"2026-08-06T00:39:58.764343Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.kesingirisadresi.com/","fqdn":"galabet.kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a4bdc461a1d196cb515514b2aa52b2e","sha1":"5db04a3775330917827e3f627f8ce82a5e4c3212","sha256":"89d835ca7f1ac6897d0ffb7f56b7312fab2d842cd91d4e232a55e2a33351f6a7","sha512":"65f46fab164f70c9dc41a8cdf7e2f5ae6ad05653f0d65f35a17b167a868238498dce307a2405fd0274ba2279b9a5295012910528731ce9818f50cb37b40c5c65","ssdeep":"","tlshash":"fa61c05ff692267788bb3ebe2acf12643b3604475406d4123a7cc9461f91f911876af8","size":3265,"data":"","first_seen":"2026-07-28T12:25:02.896374Z","last_seen":"2026-08-06T04:06:19.741481Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.kesingirisadresi.com/","fqdn":"galabet.kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4b8c445bfddba827a22786e39558d3b","sha1":"57e1e8f9bb352ff8761285bec7ee998c5ce97210","sha256":"86964913350075a1abefe2a246a22aa1518dc8396c34cca1ccd22d6dfac34c06","sha512":"1e91430a3dac0c01fadee1d203a755711c6870b337c854577288d7e9c294b6ff039399d77d34fb709b4668581456a4e9c89a9e5f2d4084cf713f6960372be81b","ssdeep":"","tlshash":"5de0d867e0418a444d6f18d4961f664de8ed8e866dfe0a55052962c08324b6d8e166a8","size":375,"data":"","first_seen":"2026-08-06T00:31:29.745754Z","last_seen":"2026-08-06T04:06:19.743564Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kesingirisadresi.com/assets/css/style.css","fqdn":"kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.439Z","timestamp":1785976770439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kesingirisadresi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:20:37 GMT","end":"Wed, 28 Oct 2026 12:20:36 GMT"},"fingerprint":{"sha1":"F3:42:AB:BD:FC:86:39:0A:B7:21:CA:EF:4A:BB:0A:7E:AB:0E:AD:B7","sha256":"81:E4:20:1E:B0:80:21:2D:63:7C:4A:62:A7:69:EC:BE:84:D6:C7:8D:37:B9:17:97:4F:DA:1D:FF:00:F4:CC:76"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: kesingirisadresi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 30 Jul 2026 13:32:49 GMT\r\netag: \"cd95-657d41baaf58d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8717\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":52629,"size_decoded":8999,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4dc9b4aa433510e2e436e5575ac43538","sha1":"0c9bb4d2b22d4b3cd1b504d65d86732be91704d7","sha256":"bbf180993b5eee15a26e40c85fbc4583e78dc30cad9032ae3bceade43b75a708","sha512":"6fa4669530ea1621565d23ea2066adb53d5434bab1d5f0b693b2b48a3922ce5a0b40df38ad839e3656bf1598d2c0252c8171504d2e89b68557102b006fa03422","ssdeep":"768:/rEatFXTj29Xqk6ZsyCQm3ZX2yuDJvj8DEg:/lo9a9s5N3p2yuDJvj8DEg","tlshash":"b933415267349134b927ae6477bbaf59b3186403c805a5b8aae400cccdfd2fddd92b4c","first_seen":"2026-07-28T12:25:02.85726Z","last_seen":"2026-08-06T04:06:19.712853Z","times_seen":12,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":30,"connect":20,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"kesingirisadresi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.577Z","timestamp":1785976770577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 12:27:43 GMT\r\nexpires: Mon, 02 Aug 2027 12:27:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 303107\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-08-13T20:34:27.338639Z","times_seen":20299,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":65,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.583Z","timestamp":1785976770583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11624\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Aug 2026 10:41:31 GMT\r\nexpires: Tue, 03 Aug 2027 10:41:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223079\r\nlast-modified: Wed, 10 Sep 2025 16:58:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11624,"size_decoded":12437,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11624, version 1.0","md5":"bd4781a31b4215a1e80868802b3d0e05","sha1":"06ad36000cd89dec93e4398c5b62565ab1d1b1e2","sha256":"db5ff4db83e580426280e9337a58dc57d3a83784a1b03ad80914651594441d52","sha512":"49b11df2a23830aadb044f1b1dacb481b16f198bd93ff3b563f5edd9e3b87a2399564f025b5582c5cb49f373c9a7429004ba8250756d1a6c84d7b4fff9c6d9c0","ssdeep":"192:Gn+/zzyRJgQbETz4+DkOtGNaYtNceZyi6aGofEsXBymPIdXBOonkCKaIgwX:xeLxIcGkO4IbRaGofEsXBvPI7O67Y","tlshash":"8532b0c427abf992dc1040b1e94726820e15d753290e7805b6b472e1ae9a9c75189fff","first_seen":"2025-08-08T05:21:53.783325Z","last_seen":"2026-08-12T20:04:42.565662Z","times_seen":676,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb=","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.773Z","timestamp":1785976770773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkaplan.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:29:50 GMT","end":"Wed, 30 Sep 2026 15:29:49 GMT"},"fingerprint":{"sha1":"CF:60:F0:27:77:0E:31:BB:9A:E1:93:D3:84:0C:2C:4F:D4:9D:14:12","sha256":"AD:DA:D2:7A:E8:7B:78:F7:09:77:73:1E:B3:6C:9B:08:E5:F4:71:B9:A2:7A:0F:D1:26:1F:E3:3E:7B:67:EC:C3"}}},"request":{"raw":"GET /serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb= HTTP/1.1\r\nHost: arkaplan.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 366\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":547,"size_decoded":627,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (547), with no line terminators","md5":"718b3ef6e707a0544285b8251da01e21","sha1":"a510e4fca3456e892bb16a028f0b93ba03e6b0ec","sha256":"328210c59dc8c6e7be99e65216d45a952051d555685b208a02176c2343139962","sha512":"e60dc8e06dacb544b644b9b8953407ee3078dfe283ed569f5de044005331fd54c3c73bd419f4d43b5cf86bf9230cd857f1ad4fd6696ca9e5a9b0245c386e36cc","ssdeep":"","tlshash":"c8f08bf2a97192660451800a4a09fdac2a12f40faf630048fb98666d965e82d2d2b2a5","first_seen":"2026-07-28T12:52:42.790509Z","last_seen":"2026-08-06T00:39:58.764343Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/assets/uploads/img_69d756f49549a.gif","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.803Z","timestamp":1785976770803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkaplan.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:29:50 GMT","end":"Wed, 30 Sep 2026 15:29:49 GMT"},"fingerprint":{"sha1":"CF:60:F0:27:77:0E:31:BB:9A:E1:93:D3:84:0C:2C:4F:D4:9D:14:12","sha256":"AD:DA:D2:7A:E8:7B:78:F7:09:77:73:1E:B3:6C:9B:08:E5:F4:71:B9:A2:7A:0F:D1:26:1F:E3:3E:7B:67:EC:C3"}}},"request":{"raw":"GET /assets/uploads/img_69d756f49549a.gif HTTP/1.1\r\nHost: arkaplan.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 02 Jul 2026 16:31:38 GMT\r\netag: \"71567-655a357a6d993\"\r\naccept-ranges: bytes\r\ncontent-length: 464231\r\ncontent-type: image/gif\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":464231,"size_decoded":464465,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"5501813822af28c365e839eade9575fb","sha1":"538a7f0b7b551c55d87c8d1f2659fc6c94e755f4","sha256":"276852f7098b5906d0be2940505e2e5856ad377a16c5424f335c5f729a27acaf","sha512":"9d77ebb3af004ed8cbf4aded05c96c9469901c6e83acc7d8bdff345a04ba4b33ec9cac8c9e13e166b851d862dd227638bd0448597e13205544670af6b8f8829c","ssdeep":"12288:pXs3LubhFZCgYklsQzrPMm1eV9yoTVlZr3ZpFS:pXs8PZMkSQzTMm13oZr3ZpFS","tlshash":"2fa423f684cda242f4260b75522e9d16f2797c6ccead0601e3a7fbd40a49f26f07106b","first_seen":"2026-07-11T15:35:23.568364Z","last_seen":"2026-08-06T00:39:58.765443Z","times_seen":4,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nostatz.vip/track.php?t=dcba49da2ec2c717f4a8\u0026u=%2F\u0026ti=Galabet%20G%C3%BCncel%20Giri%C5%9F%20Adresi%20-%20Giri%C5%9F\u0026r=","fqdn":"nostatz.vip","domain":"nostatz.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.806Z","timestamp":1785976770806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nostatz.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:45:55 GMT","end":"Thu, 01 Oct 2026 14:45:54 GMT"},"fingerprint":{"sha1":"56:E4:A6:D7:B9:76:07:E0:B3:50:BC:E3:02:15:B2:82:7D:DF:FB:41","sha256":"2D:48:14:09:1D:10:BE:C9:16:B6:6F:97:74:FB:35:22:85:6E:ED:6D:86:AA:AC:F6:85:29:C9:B5:FD:17:36:EB"}}},"request":{"raw":"GET /track.php?t=dcba49da2ec2c717f4a8\u0026u=%2F\u0026ti=Galabet%20G%C3%BCncel%20Giri%C5%9F%20Adresi%20-%20Giri%C5%9F\u0026r= HTTP/1.1\r\nHost: nostatz.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-type: image/gif\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":268,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-13T21:51:54.894313Z","times_seen":1029912,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":30,"connect":19,"send":0,"wait":24,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.565Z","timestamp":1785976770565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11624\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Aug 2026 10:41:31 GMT\r\nexpires: Tue, 03 Aug 2027 10:41:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 223079\r\nlast-modified: Wed, 10 Sep 2025 16:58:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11624,"size_decoded":12437,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11624, version 1.0","md5":"bd4781a31b4215a1e80868802b3d0e05","sha1":"06ad36000cd89dec93e4398c5b62565ab1d1b1e2","sha256":"db5ff4db83e580426280e9337a58dc57d3a83784a1b03ad80914651594441d52","sha512":"49b11df2a23830aadb044f1b1dacb481b16f198bd93ff3b563f5edd9e3b87a2399564f025b5582c5cb49f373c9a7429004ba8250756d1a6c84d7b4fff9c6d9c0","ssdeep":"192:Gn+/zzyRJgQbETz4+DkOtGNaYtNceZyi6aGofEsXBymPIdXBOonkCKaIgwX:xeLxIcGkO4IbRaGofEsXBvPI7O67Y","tlshash":"8532b0c427abf992dc1040b1e94726820e15d753290e7805b6b472e1ae9a9c75189fff","first_seen":"2025-08-08T05:21:53.783325Z","last_seen":"2026-08-12T20:04:42.565662Z","times_seen":676,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.584Z","timestamp":1785976770584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 07:44:16 GMT\r\nexpires: Fri, 30 Jul 2027 07:44:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 579314\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-13T21:35:58.932311Z","times_seen":20288,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/assets/uploads/img_6a1ee3b8c3593.gif","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.608Z","timestamp":1785976770608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkaplan.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:29:50 GMT","end":"Wed, 30 Sep 2026 15:29:49 GMT"},"fingerprint":{"sha1":"CF:60:F0:27:77:0E:31:BB:9A:E1:93:D3:84:0C:2C:4F:D4:9D:14:12","sha256":"AD:DA:D2:7A:E8:7B:78:F7:09:77:73:1E:B3:6C:9B:08:E5:F4:71:B9:A2:7A:0F:D1:26:1F:E3:3E:7B:67:EC:C3"}}},"request":{"raw":"GET /assets/uploads/img_6a1ee3b8c3593.gif HTTP/1.1\r\nHost: arkaplan.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 02 Jul 2026 16:31:42 GMT\r\netag: \"2b8f7-655a357e36996\"\r\naccept-ranges: bytes\r\ncontent-length: 178423\r\ncontent-type: image/gif\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":178423,"size_decoded":178657,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"3e3718f263bd19722b8e8ad803e90252","sha1":"a6aadeffa460de79397046d5de094e9deee948bd","sha256":"ee981d94a75d67ea2d5abbc0dfe4a44344ae3d9d6f1255b87905ed21a3d4e086","sha512":"060653214c31d11826f014abe5837e8fe248f36b00d284f7b1fd84d887cdd3f3cb6312e8aa4b8d5f56472435db9bae6903e2ddf862fe4d482df7971c9246eebf","ssdeep":"3072:WNaMH7SmC6M0HIeCgZ5w+gQLCVH1cmx7B+MzIQjMfxJ+2HqiCrCEBh6dargvwNpW:ybSmZCgHw+gJVtx9+DQjMfxJZH22G6dR","tlshash":"c9041316c2bf018fb9a638b692ea7e7e76be4c210c04518ba79ee6790c6471d7140653","first_seen":"2026-08-06T00:39:58.768376Z","last_seen":"2026-08-06T00:39:58.768376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/serve.php?action=v\u0026i=4\u0026h=galabet.kesingirisadresi.com","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.882Z","timestamp":1785976770882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ticky.aatoolz.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:09:29 GMT","end":"Wed, 30 Sep 2026 17:09:28 GMT"},"fingerprint":{"sha1":"44:69:28:77:A2:27:42:1A:47:C1:81:F9:B7:63:48:A2:18:19:0C:46","sha256":"92:C4:DF:95:D5:97:B6:1C:5A:F9:C1:8C:61:B4:9F:36:9A:94:93:C1:37:77:49:F4:7E:7F:57:D8:6F:29:E8:D6"}}},"request":{"raw":"POST /serve.php?action=v\u0026i=4\u0026h=galabet.kesingirisadresi.com HTTP/1.1\r\nHost: ticky.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 21\r\ncontent-type: text/plain;charset=UTF-8\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.894Z","timestamp":1785976770894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 07:44:16 GMT\r\nexpires: Fri, 30 Jul 2027 07:44:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 579314\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-13T21:35:58.932311Z","times_seen":20288,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.818Z","timestamp":1785976770818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 04:52:52 GMT\r\nexpires: Fri, 30 Jul 2027 04:52:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 589598\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22553,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-08-13T21:27:23.06097Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@500;600;700;800\u0026family=Inter:wght@400;500;600\u0026family=JetBrains+Mono:wght@500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.437Z","timestamp":1785976770437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@500;600;700;800\u0026family=Inter:wght@400;500;600\u0026family=JetBrains+Mono:wght@500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 06 Aug 2026 00:39:30 GMT\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19369,"size_decoded":1758,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d6ea29935c7b82663ce6bc8406594f60","sha1":"263d583b3e68db248a3fbc1649005c65988958b8","sha256":"4eccb5dea195e9f4755bc1c67ea0153865aed23ca1a6fab996f668cb60d59a0f","sha512":"9cf6da84b499fb224b5895cbc29f9844a97ba5997e5043e69d77343b83439f2db0e3563e8febfeef506af0cedd56eeec20f852922ab3fb9d49f208af540a46fd","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlHG9Up3qnXfmG0dp3HKXClCmaRBUCj32:vXuM0pGC6C+rF/0","tlshash":"d992cea1042fa500eb431cc673cf7e3aad8e50966085d5b99bfe0c889ceec66237475d","first_seen":"2026-07-28T12:25:02.854928Z","last_seen":"2026-08-06T04:06:19.711008Z","times_seen":12,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.579Z","timestamp":1785976770579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 02 Aug 2026 12:27:43 GMT\r\nexpires: Mon, 02 Aug 2027 12:27:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 303107\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-08-13T20:34:27.338639Z","times_seen":20299,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.581Z","timestamp":1785976770581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 06:05:28 GMT\r\nexpires: Fri, 30 Jul 2027 06:05:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 585242\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-13T21:01:34.786866Z","times_seen":12800,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb=","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.610Z","timestamp":1785976770610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkaplan.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:29:50 GMT","end":"Wed, 30 Sep 2026 15:29:49 GMT"},"fingerprint":{"sha1":"CF:60:F0:27:77:0E:31:BB:9A:E1:93:D3:84:0C:2C:4F:D4:9D:14:12","sha256":"AD:DA:D2:7A:E8:7B:78:F7:09:77:73:1E:B3:6C:9B:08:E5:F4:71:B9:A2:7A:0F:D1:26:1F:E3:3E:7B:67:EC:C3"}}},"request":{"raw":"GET /serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb= HTTP/1.1\r\nHost: arkaplan.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 383\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":572,"size_decoded":644,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (572), with no line terminators","md5":"75c9f0695486bfb9fbb15106588e3360","sha1":"26d9b4b872811d35b3d0d9a15d927d52834581b9","sha256":"5fb16c666e76888a903a932e469de71ba00471b1151f86164c507c6a6955d8b9","sha512":"284cf46c21199d3e8df4b66cf7816524c73e8e657ba5b08fd786bda425f491adeb5117bdb893210c9352e3e47f4202ef565dfc1483960666d470bcf6b7f67d3e","ssdeep":"","tlshash":"abf041f3a9605118544741088706ecbc1b13fc4eae211008fb94a23c408ea2f28673ac","first_seen":"2026-08-06T00:39:58.773982Z","last_seen":"2026-08-06T04:06:19.691632Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/uploads/23d99bce229d17b0.png","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.899Z","timestamp":1785976770899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ticky.aatoolz.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:09:29 GMT","end":"Wed, 30 Sep 2026 17:09:28 GMT"},"fingerprint":{"sha1":"44:69:28:77:A2:27:42:1A:47:C1:81:F9:B7:63:48:A2:18:19:0C:46","sha256":"92:C4:DF:95:D5:97:B6:1C:5A:F9:C1:8C:61:B4:9F:36:9A:94:93:C1:37:77:49:F4:7E:7F:57:D8:6F:29:E8:D6"}}},"request":{"raw":"GET /uploads/23d99bce229d17b0.png HTTP/1.1\r\nHost: ticky.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 02 Jul 2026 18:08:24 GMT\r\netag: \"3ba9-655a4b1b63cef\"\r\naccept-ranges: bytes\r\ncontent-length: 15273\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15273,"size_decoded":15505,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"86bb1bfd6e61fc025db642a7672a9128","sha1":"11b1e3eab91517d6dbd1b31c56c99647bf54e1b4","sha256":"ad74d73ac9d5f3696f95f4608182d0a57fd7cc6caedaf114e52fb106aa6fe495","sha512":"8fab6c8f071c97b33e5d03b8459a0dbaaa4ee3688c04481307ae2bd7fa3070b8aeacf3029777f820a2e7c8620e2cdd15aaca33e8d517fb850f589f6c89163275","ssdeep":"384:hkI3awfEUogTTPKqI/m8cX0AksExpDSr545xmHHh:hkI3pfEPaTOOb0ApEjSr5sxmh","tlshash":"4262c0abc93b0d075635c45159e26f08aef68b589bccfb91f7100ca52186ca7a066f3c","first_seen":"2026-08-05T09:50:29.154024Z","last_seen":"2026-08-06T03:53:38.063477Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/flow.js","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.443Z","timestamp":1785976770443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ticky.aatoolz.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:09:29 GMT","end":"Wed, 30 Sep 2026 17:09:28 GMT"},"fingerprint":{"sha1":"44:69:28:77:A2:27:42:1A:47:C1:81:F9:B7:63:48:A2:18:19:0C:46","sha256":"92:C4:DF:95:D5:97:B6:1C:5A:F9:C1:8C:61:B4:9F:36:9A:94:93:C1:37:77:49:F4:7E:7F:57:D8:6F:29:E8:D6"}}},"request":{"raw":"GET /flow.js HTTP/1.1\r\nHost: ticky.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 02 Jul 2026 18:08:22 GMT\r\netag: \"1323-655a4b195dbd5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1946\r\ncontent-type: text/javascript\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4899,"size_decoded":2235,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2f2dac3670e072b9ba4b7a70851fd65f","sha1":"60353ff763707fbf432aadf19807498dcb7839af","sha256":"f425f140fa5a47920838caec85bdb8c4ccce72a3459e2b96fb520772c95056af","sha512":"ba9841e5ad9b7777d89b360bcd0f51ca59d8ddfebb77ce57135009fd95b6b19e47791530e296945c16dbd1baedd68eee6f735dd537264bfd2480569292b99656","ssdeep":"96:7OYkSBzt1B7cRMVkrhBvfAqnKCwoIZejCDDvC/06ta:yYkSBfbILvzCjwjC/MI","tlshash":"4ba1b63bbe7300bc6a2f805f66bee569316400235403ec61b46ce4199fd0d66167bafc","first_seen":"2026-07-14T12:24:12.283168Z","last_seen":"2026-08-06T04:06:19.733254Z","times_seen":12,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.568Z","timestamp":1785976770568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 07:44:16 GMT\r\nexpires: Fri, 30 Jul 2027 07:44:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 579314\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-13T21:35:58.932311Z","times_seen":20288,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":56,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.575Z","timestamp":1785976770575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 41338\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T21:52:03.615812Z","times_seen":258287,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":53,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.578Z","timestamp":1785976770578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 41338\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T21:52:03.615812Z","times_seen":258287,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":49,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/assets/uploads/img_6a6f62330ea85.gif","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.770Z","timestamp":1785976770770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkaplan.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:29:50 GMT","end":"Wed, 30 Sep 2026 15:29:49 GMT"},"fingerprint":{"sha1":"CF:60:F0:27:77:0E:31:BB:9A:E1:93:D3:84:0C:2C:4F:D4:9D:14:12","sha256":"AD:DA:D2:7A:E8:7B:78:F7:09:77:73:1E:B3:6C:9B:08:E5:F4:71:B9:A2:7A:0F:D1:26:1F:E3:3E:7B:67:EC:C3"}}},"request":{"raw":"GET /assets/uploads/img_6a6f62330ea85.gif HTTP/1.1\r\nHost: arkaplan.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 02 Aug 2026 15:28:51 GMT\r\netag: \"100b1-6581214279331\"\r\naccept-ranges: bytes\r\ncontent-length: 65713\r\ncontent-type: image/gif\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":65713,"size_decoded":65946,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"844c0429bce6ea85618394f1907ef00c","sha1":"0db0a2f9a94d181a377a064f441a4ed1181227db","sha256":"36e36fb3a876e9c7c976a240b89a916c307bff9388afaaa3b16415f893f9684e","sha512":"fa0e9869720a58897cd61be8568986e518084c092c3ac79e3aef59e093455f4e2a0838a72faedeb51c27951ac707d9932b8af8116ee8e030dd59f4baf367c761","ssdeep":"1536:ABDve6KzAc2nZKMgT2A9yeDv0dbE8xmz4kcmG7mLDb/q3:AgxzCKM62stgb9mhGGbi3","tlshash":"205301749edc5f3ae541c3333c21da56cbc9be19ed19b7fb5d22322541286882ca97e0","first_seen":"2026-08-04T15:18:42.268251Z","last_seen":"2026-08-06T04:06:19.738364Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/serve.php?action=get\u0026h=galabet.kesingirisadresi.com\u0026t=off\u0026b=ana-grup-1","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.809Z","timestamp":1785976770809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ticky.aatoolz.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:09:29 GMT","end":"Wed, 30 Sep 2026 17:09:28 GMT"},"fingerprint":{"sha1":"44:69:28:77:A2:27:42:1A:47:C1:81:F9:B7:63:48:A2:18:19:0C:46","sha256":"92:C4:DF:95:D5:97:B6:1C:5A:F9:C1:8C:61:B4:9F:36:9A:94:93:C1:37:77:49:F4:7E:7F:57:D8:6F:29:E8:D6"}}},"request":{"raw":"GET /serve.php?action=get\u0026h=galabet.kesingirisadresi.com\u0026t=off\u0026b=ana-grup-1 HTTP/1.1\r\nHost: ticky.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":229,"size_decoded":490,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c5cf0fa0e026881128f1dcc7537091dd","sha1":"2d5917b313d146385b75cd6ecb2323aeea6b6a9f","sha256":"453f3773aadb88b543f979990ee0099dc48dcf9686d4dcfa7289f76647d0e7d5","sha512":"0f2d15395420de2de3183541a8cd8f051c2785a27731858e01865700f4c47ddaf873f028939d350c337d8d94207f4850e93b943122015bba22dc481c948923e2","ssdeep":"","tlshash":"a1d0a79b9b6b5861c7a95fc11c416c2c288d7703eed0e458e5188d5ca56a96400da163","first_seen":"2026-08-05T09:50:29.128224Z","last_seen":"2026-08-06T03:53:38.089606Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":19,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kesingirisadresi.com/assets/img/favicon/android-chrome-512x512.png","fqdn":"kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.949Z","timestamp":1785976770949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kesingirisadresi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:20:37 GMT","end":"Wed, 28 Oct 2026 12:20:36 GMT"},"fingerprint":{"sha1":"F3:42:AB:BD:FC:86:39:0A:B7:21:CA:EF:4A:BB:0A:7E:AB:0E:AD:B7","sha256":"81:E4:20:1E:B0:80:21:2D:63:7C:4A:62:A7:69:EC:BE:84:D6:C7:8D:37:B9:17:97:4F:DA:1D:FF:00:F4:CC:76"}}},"request":{"raw":"GET /assets/img/favicon/android-chrome-512x512.png HTTP/1.1\r\nHost: kesingirisadresi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 30 Jul 2026 13:32:50 GMT\r\netag: \"104ab-657d41bbc79f0\"\r\naccept-ranges: bytes\r\ncontent-length: 66731\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":66731,"size_decoded":66964,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"988c73f0eff1f96a0aede25e21e7a593","sha1":"d3dc9dcae9445551b0ff8ced6ac064c7bebe1b44","sha256":"1e19e798f4d75f014360b9f0f3f5983bf8828f7a24faa60163caa3dd4837b97e","sha512":"0af989e0c1fbfc6381ff9285ed7d16f64cd8b6f86f31a3284aee2b5ff287d429069008900520bd5604583695ebd5d0ab0a0acec7ec476d5bf25f71e883b4707d","ssdeep":"1536:k149iPhfwTT/eASkb1lqQHNL6ePJrw12X7UzfzEPEpo:K49+hIOFyDxNL6ePVxX7Uncqo","tlshash":"796302221aedc75b6ac1387e323ca4c13638321b7367c855e14fe76176916cdd8272ad","first_seen":"2026-07-20T12:55:06.727753Z","last_seen":"2026-08-06T04:06:19.735261Z","times_seen":17,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"kesingirisadresi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kesingirisadresi.com/assets/img/favicon/favicon.svg","fqdn":"kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.951Z","timestamp":1785976770951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kesingirisadresi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:20:37 GMT","end":"Wed, 28 Oct 2026 12:20:36 GMT"},"fingerprint":{"sha1":"F3:42:AB:BD:FC:86:39:0A:B7:21:CA:EF:4A:BB:0A:7E:AB:0E:AD:B7","sha256":"81:E4:20:1E:B0:80:21:2D:63:7C:4A:62:A7:69:EC:BE:84:D6:C7:8D:37:B9:17:97:4F:DA:1D:FF:00:F4:CC:76"}}},"request":{"raw":"GET /assets/img/favicon/favicon.svg HTTP/1.1\r\nHost: kesingirisadresi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 30 Jul 2026 13:32:53 GMT\r\netag: \"178-657d41bead90f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 262\r\ncontent-type: image/svg+xml\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":376,"size_decoded":547,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"151b534ef7703c24ad3b03b02bc34148","sha1":"86ff0ae004938a029566e67c746ba2022ca848ca","sha256":"63c02d8fb9291a1937532f47d2211131e03889d0f5059381ef5f0307ba501f11","sha512":"f87466105bad3b699df7b0f488831b6565d9cc98522009ec7e673913eeae5dd364327673200820d4786e3fa40550bfeaa04b7fb51a2602285385396554dca2f1","ssdeep":"","tlshash":"0de0680081c49b088b248d1a2f26fa59716be0c685c54f58f6dc6e631fcbad32a8338d","first_seen":"2026-07-20T12:55:06.725847Z","last_seen":"2026-08-06T04:06:19.739008Z","times_seen":17,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"kesingirisadresi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb=","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.442Z","timestamp":1785976770442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkaplan.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:29:50 GMT","end":"Wed, 30 Sep 2026 15:29:49 GMT"},"fingerprint":{"sha1":"CF:60:F0:27:77:0E:31:BB:9A:E1:93:D3:84:0C:2C:4F:D4:9D:14:12","sha256":"AD:DA:D2:7A:E8:7B:78:F7:09:77:73:1E:B3:6C:9B:08:E5:F4:71:B9:A2:7A:0F:D1:26:1F:E3:3E:7B:67:EC:C3"}}},"request":{"raw":"GET /serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb= HTTP/1.1\r\nHost: arkaplan.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 368\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":550,"size_decoded":629,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (550), with no line terminators","md5":"ecc693e16779a0a40a84525ed04127d2","sha1":"7c47fbf9df0313a056c9d32f60cb12e11b70278a","sha256":"1e423362fedf93fbecec036e3f063612d49f7bc4ed6836e63ae6a4355e9d24de","sha512":"12478fa231439bffceb7a951fe843cd84b890a6a4b942336d46297dc6df8621280d8a6e41ac6b8bc39595c01c40a9098bf86472fcd243aaf32da05a6e53dde7f","ssdeep":"","tlshash":"17f081f2f5719196144140094e05edbd5a12f44faf621148ffd4652c575e81d68172a5","first_seen":"2026-08-06T00:39:58.791718Z","last_seen":"2026-08-06T00:39:58.791718Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":67,"connect":19,"send":0,"wait":24,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.562Z","timestamp":1785976770562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 06:05:28 GMT\r\nexpires: Fri, 30 Jul 2027 06:05:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 585242\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-13T21:01:34.786866Z","times_seen":12800,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":21,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.569Z","timestamp":1785976770569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 04:52:52 GMT\r\nexpires: Fri, 30 Jul 2027 04:52:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 589598\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22553,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-08-13T21:27:23.06097Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":37,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.573Z","timestamp":1785976770573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 41338\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T21:52:03.615812Z","times_seen":258287,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":30,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.kesingirisadresi.com/","fqdn":"galabet.kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T00:39:29.957Z","timestamp":1785976769957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kesingirisadresi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:20:37 GMT","end":"Wed, 28 Oct 2026 12:20:36 GMT"},"fingerprint":{"sha1":"F3:42:AB:BD:FC:86:39:0A:B7:21:CA:EF:4A:BB:0A:7E:AB:0E:AD:B7","sha256":"81:E4:20:1E:B0:80:21:2D:63:7C:4A:62:A7:69:EC:BE:84:D6:C7:8D:37:B9:17:97:4F:DA:1D:FF:00:F4:CC:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.kesingirisadresi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=rlhdk0us97bhl7iaqo5v1bgilt; path=/; secure; HttpOnly; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 9701\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":52154,"size_decoded":10098,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (678), with CRLF, CR, LF line terminators","md5":"b949dc8455aa71354b81192bfa0d5548","sha1":"82ee53eeaa92acbc0f2551945218c2120123befe","sha256":"beb8b9cfb9fc935a98e80b9028107ef76175f1406b75171b5f41da95f1d6ddaf","sha512":"4009f07b3f3fb69e6df3282b2e3c218ff0f6fcb171d6840ac58cfdf4954d53008c16f2e7efae86225c82a778e310e164239096845e3c1fd3b47f08008a899414","ssdeep":"384:TzjDBW0UxE/qeGS084E1v9egqyOqjeCk0yxEZoeGWo44pwvY8u2mva7E:TzjtLcen084GPqyphpuejo44pito","tlshash":"a333f9a26ef9383f031391d37256163eafab8207d9565806b6bd8f480fa6d87dc5311c","first_seen":"2026-08-06T00:39:58.795111Z","last_seen":"2026-08-06T00:39:58.795111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":4,"connect":20,"send":0,"wait":39,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"galabet.kesingirisadresi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kesingirisadresi.com/assets/img/sitelogos/galabet-logo.webp","fqdn":"kesingirisadresi.com","domain":"kesingirisadresi.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.441Z","timestamp":1785976770441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kesingirisadresi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:20:37 GMT","end":"Wed, 28 Oct 2026 12:20:36 GMT"},"fingerprint":{"sha1":"F3:42:AB:BD:FC:86:39:0A:B7:21:CA:EF:4A:BB:0A:7E:AB:0E:AD:B7","sha256":"81:E4:20:1E:B0:80:21:2D:63:7C:4A:62:A7:69:EC:BE:84:D6:C7:8D:37:B9:17:97:4F:DA:1D:FF:00:F4:CC:76"}}},"request":{"raw":"GET /assets/img/sitelogos/galabet-logo.webp HTTP/1.1\r\nHost: kesingirisadresi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 30 Jul 2026 13:34:07 GMT\r\netag: \"96e-657d4205a5563\"\r\naccept-ranges: bytes\r\ncontent-length: 2414\r\ncontent-type: image/webp\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2414,"size_decoded":2645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x44, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3d63f19cc05509c2852d0baeec8f2907","sha1":"610ec234f594f84757f837715bead08364c83478","sha256":"d12df7923ca94b91ba577b748169182f4c8733969c49966ac07c2cae96ef80d6","sha512":"c8f069323ce2b05f2b448c23f2ee1fcf0104d9588066acf538417a7817bff4683f70496ed28171249cf332b8004efd1fc6999224c8c2b1be136a994b6d925656","ssdeep":"","tlshash":"13413d45862073660906d60692518e96fc4bfd4b7f96c097339d29920d303e78ebc5cf","first_seen":"2026-07-20T12:55:06.731535Z","last_seen":"2026-08-06T04:06:19.724426Z","times_seen":7,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"kesingirisadresi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"kesingirisadresi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/assets/bundles/b_6a24878d59fbb/index.html","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.736Z","timestamp":1785976770736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkaplan.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:29:50 GMT","end":"Wed, 30 Sep 2026 15:29:49 GMT"},"fingerprint":{"sha1":"CF:60:F0:27:77:0E:31:BB:9A:E1:93:D3:84:0C:2C:4F:D4:9D:14:12","sha256":"AD:DA:D2:7A:E8:7B:78:F7:09:77:73:1E:B3:6C:9B:08:E5:F4:71:B9:A2:7A:0F:D1:26:1F:E3:3E:7B:67:EC:C3"}}},"request":{"raw":"GET /assets/bundles/b_6a24878d59fbb/index.html HTTP/1.1\r\nHost: arkaplan.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 02 Jul 2026 16:31:28 GMT\r\netag: \"3dc9-655a3570d4102-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4058\r\ncontent-type: text/html\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkaplan.aatoolz.one/serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb=","fqdn":"arkaplan.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.738Z","timestamp":1785976770738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arkaplan.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:29:50 GMT","end":"Wed, 30 Sep 2026 15:29:49 GMT"},"fingerprint":{"sha1":"CF:60:F0:27:77:0E:31:BB:9A:E1:93:D3:84:0C:2C:4F:D4:9D:14:12","sha256":"AD:DA:D2:7A:E8:7B:78:F7:09:77:73:1E:B3:6C:9B:08:E5:F4:71:B9:A2:7A:0F:D1:26:1F:E3:3E:7B:67:EC:C3"}}},"request":{"raw":"GET /serve/display.php?t=dc89f6ee07f724b9\u0026target=content-dc89f6ee07f724b9\u0026cb= HTTP/1.1\r\nHost: arkaplan.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.kesingirisadresi.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 400\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 06 Aug 2026 00:39:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":579,"size_decoded":661,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (579), with no line terminators","md5":"7fc2c03cdbd7986d007969555e852578","sha1":"3f3ac36f85d5518400257903f2a178f6fd1bee05","sha256":"8e593a5317a17fc009b55da4d7d98bed027819c9f1c4f9a3648bedd02a5cf920","sha512":"399e243e9c08080cacc358961f58dcaac2eb526601722f6a4115ea434ee2518bfd9442e31c63cbf160ba3dc64bfcf35a70120bc483e3042576bae03432df2a7d","ssdeep":"","tlshash":"13f0acb2e5b19296584541064e08fdac1a02f40f6f621048eb9cb56c865e81e68372e5","first_seen":"2026-08-04T15:18:42.261938Z","last_seen":"2026-08-06T04:06:19.727855Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.kesingirisadresi.com/","date":"2026-08-06T00:39:30.896Z","timestamp":1785976770896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.kesingirisadresi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 07:44:16 GMT\r\nexpires: Fri, 30 Jul 2027 07:44:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 579314\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-13T21:35:58.932311Z","times_seen":20288,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}