Report - sistemlognsa.xyz/

Report Overview

Submitted URL
sistemlognsa.xyz/
IP
108.61.210.122
ASN
#20473 AS-CHOOPA
Submitted
2024-04-24 06:17:42
Access
public
Website Title
Müşteri Portalı | e-Devlet
Final URL
sistemlognsa.xyz/
Tags
e-devlet phishing government turkey
urlquery detections
Phishing - e-Devlet

Detections

urlquery
80
Network Intrusion Detection
0
Threat Detection Systems
54

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.6 kB	134 kB	216.58.207.227
sistemlognsa.xyz	unknown	unknown	No data	No data	12 kB	616 kB	108.61.210.122
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	1.0 kB	34 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey
2024-04-23	medium	sistemlognsa.xyz/	Government of Turkey

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	unknown	34 B	2023-04-11	2024-05-05
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-05 23:43:49 Times Seen76217 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	sistemlognsa.xyz/	40 B	2023-03-07	2024-05-05
Pretty URL sistemlognsa.xyz/ IP 108.61.210.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:07 Last Seen2024-05-05 01:20:21 Times Seen4753 Hash 6bd43cf0ae158526c6ab93dc3be79f28 15c289e342bd3fdf5b1e95f7abf25a2bc78bf357 7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38 Loading...

	sistemlognsa.xyz/assets/js/script.js	166 kB	2023-05-01	2024-05-03
Pretty URL sistemlognsa.xyz/assets/js/script.js IP 108.61.210.122 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-01 12:55:36 Last Seen2024-05-03 19:37:33 Times Seen325 Hash 5aa332b5891e11ec6c0ceef84e83ba21 6199b80de81251c61234c9532c4fd6f55a44e148 9ea5de183cb4e7bbfd327d5d5283553f323e60e149bd3ebee310e81c5eda500e Loading...

		Size	First Seen	Last Seen
	#1 Write - 07811dc6c422334ce36a09ff5cd6fe71	4 B	2023-03-11	2024-05-05
Pretty Observations First Seen2023-03-11 11:15:57 Last Seen2024-05-05 21:16:12 Times Seen2156 Hash 07811dc6c422334ce36a09ff5cd6fe71 7e79a3af2634de6635e59c9404d251b3955d39f9 6557739a67283a8de383fc5c0997fbec7c5721a46f28f3235fc9607598d9016b Loading...

HTTP Transactions (32)

URL IP Response Size

sistemlognsa.xyz/assets/images/banks/akbank.jpg

108.61.210.122

200 OK

3.1 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/akbank.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
3.1 kB (3052 bytes)
Hash
5efd7fb621b6e039549923f7e1fd4a17
043dfe10e2d4d90a72e5624166ec961be7b20b3a
6df70210d474fd90f14d08bb9dbc66c0411fb1f85f503dcd62916fec271a2c5a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/akbank.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 3052
last-modified: Sun, 19 Dec 2021 06:29:50 GMT
etag: "61bed15e-bec"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/albaraka.jpg

108.61.210.122

200 OK

36 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/albaraka.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:10:01 20:19:27], progressive, precision 8, 500x200, components 3
Size
36 kB (36270 bytes)
Hash
dff21d4248fc2a0b6b34a0d108b9121a
e52b06b2f5c7379ae46751b399a10e53425c02d4
599a24cf29ab06d972a5c2e4386f21051d3b78b27f93b9306eb3ffcc71263b94

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/albaraka.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 36270
last-modified: Sat, 01 Oct 2022 20:19:28 GMT
etag: "6338a0d0-8dae"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/garanti.jpg

108.61.210.122

200 OK

5.3 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/garanti.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
5.3 kB (5268 bytes)
Hash
34cde1a4d95782dc8a404f3b7a22707c
11acdbecc2e820ea75a21efc9d19c7f3ebb62631
cf164d0f6dbdd0f6aa11ba954189b8dcf4cd07ad066083633986c176fc0019cd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/garanti.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 5268
last-modified: Sun, 19 Dec 2021 06:32:32 GMT
etag: "61bed200-1494"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/anadolu.jpg

108.61.210.122

200 OK

21 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/anadolu.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:10:01 17:20:05], progressive, precision 8, 500x200, components 3
Size
21 kB (20736 bytes)
Hash
7e0925a6f6a401c7e8721b9836fc721f
9a0b48e0bd35ccc96c5391b2a30e8260098d7df7
ca3770bb64ef72ab2c7d2e1b28639fe9145970310eedef1657cb2b81bb3aa4c5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/anadolu.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 20736
last-modified: Sat, 01 Oct 2022 17:20:06 GMT
etag: "633876c6-5100"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/fiba.jpg

108.61.210.122

200 OK

37 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/fiba.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:09:28 03:31:15], progressive, precision 8, 500x200, components 3
Size
37 kB (36954 bytes)
Hash
55eac6447192dc06174ffd6fc925b12c
eb34ea301401fdaae5c50d52e2f11934738e98f5
652f9b7ef8cd5a0c66cb112ce2b7eb8ea7f9332d13552c7e82e9c7e5f532e075

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/fiba.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 36954
last-modified: Wed, 28 Sep 2022 03:31:16 GMT
etag: "6333c004-905a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/halk.jpg

108.61.210.122

200 OK

4.9 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/halk.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
4.9 kB (4904 bytes)
Hash
a82f67a8bcfff4ea7793bb3fcc00cb4d
decc78e3f9341338eb0ab9757735e2338a5de451
871657ef72c4641d784288fbccbc14775b72a07437c69e2e29d7a2ae0bed9f73

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/halk.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 4904
last-modified: Sun, 19 Dec 2021 06:30:10 GMT
etag: "61bed172-1328"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/sekerbank.jpg

108.61.210.122

200 OK

31 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/sekerbank.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:10:01 18:05:41], progressive, precision 8, 500x200, components 3
Size
31 kB (30853 bytes)
Hash
086ff182d1ce8900789c915f40274fba
8b3a467a19d3b3e1b014646b4d720570a44a129b
cfe6b1fdc9e2ab8bbda89190e3305a86866196d1b60bb3b3849d47cd5c89a3c6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/sekerbank.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 30853
last-modified: Sat, 01 Oct 2022 18:05:42 GMT
etag: "63388176-7885"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/ing.jpg

108.61.210.122

200 OK

52 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/ing.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:10:01 17:48:36], progressive, precision 8, 500x200, components 3
Size
52 kB (52012 bytes)
Hash
2c6418346997fdb03349d4f026bed400
eb6fc219bb66829771c3d153fd1c042aa31b368b
fcc9fe739e09a1e8c65fa63d6802fe6d87aeb4bb73b3a41eaf90426a5f5d6cc0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/ing.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 52012
last-modified: Sat, 01 Oct 2022 17:48:36 GMT
etag: "63387d74-cb2c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/1.png

108.61.210.122

200 OK

2.2 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/1.png
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
PNG image data, 165 x 40, 8-bit colormap, interlaced
Size
2.2 kB (2220 bytes)
Hash
fdac5f9234036c2502cee52c30f7774b
cd24a9f757055e2ef598be0d164934c6a1b4e3cd
473f0d637169b8b400874ffb0c487dfc5f4bc544e8bfebe98502a6a5ceb781e7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/1.png HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/png
content-length: 2220
last-modified: Fri, 10 Mar 2023 18:57:06 GMT
etag: "640b7d82-8ac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/odea.jpg

108.61.210.122

200 OK

25 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/odea.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:10:01 17:34:34], progressive, precision 8, 500x200, components 3
Size
25 kB (24936 bytes)
Hash
2c60ad4276905c8109bb3981c24bb068
fb8c7c8f07557ff9776d9a95cb50a946a3d326bb
497b1ce30cdf438891fc6f8dc9250206822acc3e0f3d81d88599c6e6dc177795

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/odea.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 24936
last-modified: Sat, 01 Oct 2022 17:34:34 GMT
etag: "63387a2a-6168"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/turkiyefinans.jpg

108.61.210.122

200 OK

4.5 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/turkiyefinans.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
4.5 kB (4528 bytes)
Hash
7d37026130c2a0b269bd4f9c165fad7f
f53514c0d1a2f644cb6db4ffadf0167fec4413bf
008b64adb48fe137b0210b3187450b8804fb291d5283e794e2eae52e05d61720

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/turkiyefinans.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 4528
last-modified: Sun, 19 Dec 2021 06:34:06 GMT
etag: "61bed25e-11b0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/ptt.jpg

108.61.210.122

200 OK

5.3 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/ptt.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
5.3 kB (5260 bytes)
Hash
810a4de086e544a749cf1b43416178ee
a3102b2bb04886a9665207a1c70068d31f5bda71
1d2f039fdbea8658d2d94f561bc21b0431efac371adddc47d81bb95b6b8bc4bd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/ptt.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 5260
last-modified: Sun, 19 Dec 2021 06:30:00 GMT
etag: "61bed168-148c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/deniz.jpg

108.61.210.122

200 OK

5.8 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/deniz.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
5.8 kB (5774 bytes)
Hash
7995b5e53599897563011d13aa49ea5f
f56c2f94bfb6cd60d11d278e0fbeac6703590e72
d51ff84f13144f25ddc1daf353e519c9541ec6be63da2c25fb3868112064af32

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/deniz.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 5774
last-modified: Sun, 19 Dec 2021 06:30:02 GMT
etag: "61bed16a-168e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/isbank.jpg

108.61.210.122

200 OK

5.0 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/isbank.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
5.0 kB (4990 bytes)
Hash
fd5e77dc351059471eebc68959b970ac
a6e147f8e19ec340715a8180f9dc0a3171c1d159
d3f148ed9edfb70ea4138f1d06b50ad305da5fce6f8c4155642c84793dadacc2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/isbank.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 4990
last-modified: Sun, 19 Dec 2021 06:29:46 GMT
etag: "61bed15a-137e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/alternatif.jpg

108.61.210.122

200 OK

46 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/alternatif.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:10:01 17:19:10], progressive, precision 8, 500x200, components 3
Size
46 kB (46102 bytes)
Hash
6cffc318b97a4d585f3b967257f7e3b1
6b3b875b2d43d05c90dd5f1df832473b1b369d42
f420da08280cb364b9dd6ef4c6404923854a0e449deaa93f7a97044bed52b463

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/alternatif.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 46102
last-modified: Sat, 01 Oct 2022 17:19:10 GMT
etag: "6338768e-b416"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/vakif.jpg

108.61.210.122

200 OK

4.4 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/vakif.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
4.4 kB (4414 bytes)
Hash
d1306ee481d42e8b5c9bedc7912750bd
69280f12c5a71880b049d64cca44b99aacaf6dc3
c005bb0a1e17fd46685cfff945353975bdac012d5f487be9c3bffe1c08f02fb0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/vakif.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 4414
last-modified: Sun, 19 Dec 2021 06:29:56 GMT
etag: "61bed164-113e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/hsbc.jpg

108.61.210.122

200 OK

33 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/hsbc.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:09:28 01:56:02], progressive, precision 8, 500x200, components 3
Size
33 kB (33055 bytes)
Hash
6b6d6494a2d5fe6292641588af2ff231
d4d82a589a1e71a4c917b0afc0267bac3c672480
c521f96b7435290fd70825a2d5e45a10dc3789fefd0d98851f72330c1d6f7a11

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/hsbc.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 33055
last-modified: Wed, 28 Sep 2022 01:56:02 GMT
etag: "6333a9b2-811f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/kuveyt.jpg

108.61.210.122

200 OK

4.1 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/kuveyt.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
4.1 kB (4050 bytes)
Hash
c9d61e6409128b3b695da5d0f577709d
df9f6b72f626a34e1a0f7c5e09198616cd055dc6
4c353eb3748f302e18d210a9ab7cc1ba7e1b28a7357e038782e4e7a88088547a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/kuveyt.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 4050
last-modified: Sun, 19 Dec 2021 06:29:42 GMT
etag: "61bed156-fd2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/teb.jpg

108.61.210.122

200 OK

22 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/teb.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2022:09:27 19:59:58], progressive, precision 8, 500x200, components 3
Size
22 kB (22502 bytes)
Hash
ac0cd030d45d9e6e66c084bde8e550bc
ddcd46644e2f43b14a8d399106f697631a138b2c
42ac0a069fb6314753f1fdd80c94daeeb7e784fbc34661ca692c7885390a86b9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/teb.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 22502
last-modified: Tue, 27 Sep 2022 20:00:00 GMT
etag: "63335640-57e6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/ykb.jpg

108.61.210.122

200 OK

4.0 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/ykb.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
4.0 kB (4042 bytes)
Hash
f188c8bdec3ef94c06aaef6ee7381867
36dd9ecd9ecce60496899dcc092508d06add77dd
80f27648ba9bcfe1f3e29eaa9ea2b0c87c815cafaa0d708042d0ee926e295b14

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/ykb.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 4042
last-modified: Sun, 19 Dec 2021 06:29:52 GMT
etag: "61bed160-fca"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/ziraat.jpg

108.61.210.122

200 OK

3.5 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/ziraat.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
3.5 kB (3510 bytes)
Hash
43c944fa568502baedcce9455d812c3c
d9b1cfcad1a4af9ce14af46b37d91dd8551ae9bc
ee9df8faf35a0992e4dbffc2df4bb02fd6691184766d2915cf2e19bc4e906fe3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/ziraat.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 3510
last-modified: Sun, 19 Dec 2021 00:23:50 GMT
etag: "61be7b96-db6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/

108.61.210.122

200 OK

8.8 kB

URL User Request GET HTTP/2
sistemlognsa.xyz/
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (571)
Size
8.8 kB (8827 bytes)
Hash
20a9e2a223ed126215aeeee59f03c375
66b4a73845e187910d7c9058f2cdd4d8f8254b2b
add940a86aa9563753af3fdefb4b3d8394068fbc6cb1c9b972d5fef41e834420

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET / HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: text/html
last-modified: Sun, 12 Mar 2023 17:11:42 GMT
etag: W/"640e07ce-2754"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap

142.250.74.106

200 OK

11 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
11 kB (11178 bytes)
Hash
f943680c495f1f626036ec86e40ccbeb
5cfb4eb513c4b92bcc69c22fa9962135ceb1f043
009c7764b3147ce69346ac6e5e59b47d7c561499df2b20a03a2551b87e85c18b

HTTP Headers

GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 06:17:16 GMT
date: Wed, 24 Apr 2024 06:17:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sistemlognsa.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 531736
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sistemlognsa.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 531736
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35328, version 1.0
Size
35 kB (35328 bytes)
Hash
7670dba29aa2a1560c5d711ea6f6b369
6a2a620d2972f139c804c5a8363c91eb1a7595f6
adfa45260a1306cb5fefc1f17c1b5e7b61135534a82bf1b8e3d0540af7e07e3b

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sistemlognsa.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 07:26:46 GMT
expires: Wed, 23 Apr 2025 07:26:46 GMT
cache-control: public, max-age=31536000
age: 82230
last-modified: Thu, 14 Dec 2023 02:00:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/css/style.css

108.61.210.122

200 OK

26 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/css/style.css
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
Unicode text, UTF-8 text, with CRLF, CR line terminators
Size
26 kB (26427 bytes)
Hash
86c9289dc8a13c80f14ce626d5774002
f2fc238df4d4af5c1469046de573ad6bf32d3b5a
91df9cadde6f62d90f4d002bf15beb40c67ff55938b829956044b4524cda0773

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/css/style.css HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: text/css
last-modified: Fri, 28 Apr 2023 16:37:42 GMT
etag: W/"644bf656-24804"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/favicon-196x196.png

108.61.210.122

200 OK

39 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/favicon-196x196.png
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
PNG image data, 196 x 196, 8-bit/color RGBA, interlaced
Size
39 kB (38550 bytes)
Hash
3290deb61511eee631e455d4d4c421cd
44c7b59e98a30682100ece6c8672715f3cfde979
cb0374314e49be2700c9f7c6c59be3248d2658cc0f426faed041928712b26475

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/favicon-196x196.png HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:17 GMT
content-type: image/png
content-length: 38550
last-modified: Fri, 10 Mar 2023 19:18:36 GMT
etag: "640b828c-9696"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/edkkds.svg

108.61.210.122

200 OK

8.7 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/edkkds.svg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
SVG Scalable Vector Graphics image
Size
8.7 kB (8746 bytes)
Hash
8e64c3f3a7c9d6ae7fc5b160ae557f46
a4e60b7e03393e230f7d6091d831f1c0878c659b
0e8c563883ec41151b10ec8b533b02f289531175e5ca2a816bc495edd38a6114

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/edkkds.svg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/assets/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/svg+xml
content-length: 8746
last-modified: Fri, 10 Mar 2023 18:57:02 GMT
etag: "640b7d7e-222a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/images/banks/finans.jpg

108.61.210.122

200 OK

6.2 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/images/banks/finans.jpg
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 500x200, Scaling: [none]x[none], YUV color, decoders should clamp
Size
6.2 kB (6232 bytes)
Hash
23f8245ca4b48852594fd42621da538e
64ce65dd304712acca99110878facf125cfc029b
dc1ab0a4fbef32df24a561823e09cfd394cb1486bbcf4d5c74981fd74e039010

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/images/banks/finans.jpg HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: image/jpeg
content-length: 6232
last-modified: Sun, 19 Dec 2021 06:30:06 GMT
etag: "61bed16e-1858"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

sistemlognsa.xyz/assets/js/script.js

108.61.210.122

200 OK

166 kB

URL GET HTTP/2
sistemlognsa.xyz/assets/js/script.js
IP
108.61.210.122:443
ASN
#20473 AS-CHOOPA

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerLet's Encrypt
Subjectsistemlognsa.xyz
Fingerprint40:F6:B3:FB:09:82:55:18:BE:3C:78:17:D1:48:BB:DA:C7:10:11:B5
ValidityTue, 23 Apr 2024 13:46:18 GMT - Mon, 22 Jul 2024 13:46:17 GMT

File type

Size
166 kB (165489 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - e-Devlet
OpenPhish	phishing	Government of Turkey

HTTP Headers

GET /assets/js/script.js HTTP/1.1
Host: sistemlognsa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:17:16 GMT
content-type: text/javascript
last-modified: Fri, 28 Apr 2023 18:59:18 GMT
etag: W/"644c1786-28671"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Roboto+Slab:wght@100;200;300;400;500;600;700;800;900&display=swap

142.250.74.106

200 OK

22 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto+Slab:wght@100;200;300;400;500;600;700;800;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://sistemlognsa.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
22 kB (21852 bytes)
Hash
90397e2df1551f7f31b66e2759d8a50d
487d0b3d7562f9e4efbcd8548e5c6ebd77a28ef8
bd4bb9bd2a39844fa841d35ad0b27b3aeb1f625cc0d7763caf1377d7d36d6fae

HTTP Headers

GET /css2?family=Roboto+Slab:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sistemlognsa.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 06:17:16 GMT
date: Wed, 24 Apr 2024 06:17:16 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (32)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN