{"id":"24f64eea-c3b4-4656-a036-ba45bb9b943c","url":"https://anadolukuyuminsaat.com/","status":"completed","submitted_at":"2026-06-19T11:10:24.933247Z","started_at":"2026-06-19T11:11:49.901980Z","completed_at":"2026-06-19T11:12:54.609556Z","final_url":"https://anadolukuyuminsaat.com/","http_status":404,"error":null,"artifacts":{"html_url":"/artifact/html/c8c07e59d2649d23e615ec030c08f90fbe8d8d39b067c2cb7eb47a1b178fefeb.html","screenshot_url":"/artifact/screenshot/8741bc37f4fe5f67fe442040815c481bec456ed1e761ccddb563100a1d68efaf.png","har_url":"/artifact/har/5f12d65781bec096d9d80ecf34e23d5fc10db2c0e52f5f09be87263fac32b9ad.har","annotations_url":null},"metadata":{"redirect_chain":[],"network_summary":[{"url":"https://anadolukuyuminsaat.com/","status":404,"type":"document"}],"captured_js_bytes":3588,"turnstile":null,"cloudflare":null,"enrichment":{"registered":"anadolukuyuminsaat.com","host":"anadolukuyuminsaat.com","host_ip":"209.38.2.253","domain":{"key":"anadolukuyuminsaat.com","status":"fetching","data":null,"fetched_at":null,"expires_at":null,"fresh":false,"error":null},"ip":{"key":"209.38.2.253","status":"ok","data":{"asn":14061,"asn_org":"DigitalOcean, LLC","source":"geolite2-asn"},"fetched_at":"2026-06-16T08:31:00.830556+00:00","expires_at":"2026-07-16T08:31:00.830556+00:00","fresh":true,"error":null}},"timings":{"dns_ms":125,"scrape_ms":3726,"artifacts_ms":212,"enrichment_ms":218,"detection_ms":310,"per_detector_ms":{"domain":0,"forms":0,"yara":0,"urlhaus":307,"feeds":0,"brand_watch":0,"redirect_chain":0},"investigation_ms":0,"total_ms":64681,"ai_review_ms":59715},"investigation":{"hashes":{"html_sha256":"c8c07e59d2649d23e615ec030c08f90fbe8d8d39b067c2cb7eb47a1b178fefeb","screenshot_sha256":"8741bc37f4fe5f67fe442040815c481bec456ed1e761ccddb563100a1d68efaf","har_sha256":"5f12d65781bec096d9d80ecf34e23d5fc10db2c0e52f5f09be87263fac32b9ad"},"iocs":{"emails":[],"crypto_wallets":[],"telegram_bots":[],"telegram_handles":[],"telegram_chat_ids":[],"discord_webhooks":[],"phone_numbers":[],"exfil_endpoints":[],"urls":["https://anadolukuyuminsaat.com/"]},"urls_by_type":{"document":["https://anadolukuyuminsaat.com/"]},"captured_resource_urls":["https://anadolukuyuminsaat.com/"],"hosts":[{"host":"anadolukuyuminsaat.com","request_count":1,"resource_types":["document"],"asn":14061,"asn_org":"DigitalOcean, LLC","ip":"209.38.2.253","registered":"anadolukuyuminsaat.com"}],"redirect_chain":[],"chain_signature":null,"host_count_total":1,"host_count_enriched":1,"tls":{"host":"anadolukuyuminsaat.com","validated":true,"subject":{"commonName":"anadolukuyuminsaat.com"},"issuer":{"countryName":"US","organizationName":"Let's Encrypt","commonName":"YE2"},"not_before":"2026-06-18T02:53:01+00:00","not_after":"2026-09-16T02:53:00+00:00","serial_number":"06CFE7DD2EFD011D5B0CA02DC2E061392EDC","subject_alt_names":["anadolukuyuminsaat.com"],"fingerprint_sha256":"036fc9c481c7de55b824200b0f2915767a29f74699a65fd94dd123b87d748a2a","tls_version":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384"},"kit":null,"page_links":[]},"worker_host":"scraper-21","annotations_key":null,"c2_endpoints":[],"screenshot_is_decoded_kit":false},"queue_wait_ms":84968,"duration_ms":149676,"score":70,"verdict":"malicious","signals":[{"id":"domain.asn_info","severity":"info","weight":0,"detector":"domain","message":"Hosted on ASN 14061 (DigitalOcean, LLC).","evidence":{"host_ip":"209.38.2.253","asn":14061,"asn_org":"DigitalOcean, LLC"}},{"id":"cert_pl.domain_hit","severity":"critical","weight":55,"detector":"feeds","message":"CERT-PL lists this host as a phishing domain.","evidence":{"host":"anadolukuyuminsaat.com","feed":"cert_pl"}}],"ai_review":{"verdict":{"verdict":"suspicious","score_adjustment":-5,"brand_impersonated":null,"kit_fingerprint":null,"iocs":[],"rationale":"The rule-based detection flagged this domain as a phishing host in CERT-PL, which is a critical signal indicating active malicious use. However, the page content is a standard 404 error page, suggesting the domain may be parked, defunct, or used as a decoy rather than actively hosting a phishing kit. The absence of visible phishing content or specific impersonation targets lowers confidence in active malicious intent compared to the CERT-PL warning.","confidence":0.75},"skipped":false,"skipped_reason":null,"error":null,"model_text":"qwen3.5:4b","model_vlm":null,"prompt_version_text":"verdict_v1","prompt_version_vlm":null,"latency_ms":59602,"served_by":"primary"},"ai_skipped":false,"ai_skipped_reason":null,"ai_pending":false}