WEBSITE ANALYSIS REPORT

https://malimasak.net/giris

13 Sep 2026 · 20:43:41.000 UTCpublic

Report tags: e-devlet phishing government turkey
Submit tags: openphish

Request review

Phishing detected

6 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:43:12.215 GET 200 document 20.9 KB 145 ms 5 alerts

20:43:12.567 GET 200 stylesheet 50.2 KB 49 ms 5 alerts

20:43:12.569 GET 404 script 0 B 0 ms 5 alerts

20:43:12.571 GET 404 script 0 B 0 ms 5 alerts

20:43:12.573 GET 404 script 0 B 0 ms 5 alerts

20:43:12.574 GET 404 script 0 B 0 ms 5 alerts

20:43:12.576 GET 200 stylesheet 22.2 KB 74 ms 5 alerts

20:43:12.579 GET 200 script 153.9 KB 134 ms 5 alerts

20:43:12.581 GET 200 script 65.0 KB 133 ms 5 alerts

20:43:12.583 GET 200 script 9.6 KB 68 ms 5 alerts

20:43:12.591 GET 200 img 41.8 KB 92 ms 5 alerts

20:43:12.593 GET 200 img 2.2 KB 91 ms 5 alerts

20:43:12.594 GET 200 img 74.4 KB 125 ms 5 alerts

20:43:12.597 GET 200 img 16.4 KB 120 ms 5 alerts

20:43:12.692 GET 404 font 1.0 KB 51 ms 5 alerts

20:43:12.694 GET 404 font 1.0 KB 50 ms 5 alerts

20:43:12.696 GET 404 font 1.0 KB 49 ms 5 alerts

20:43:12.697 GET 404 font 1.0 KB 48 ms 5 alerts

20:43:12.698 GET 404 font 1.0 KB 47 ms 5 alerts

20:43:12.699 GET 404 font 1.0 KB 48 ms 5 alerts

20:43:12.700 GET 404 font 1.0 KB 49 ms 5 alerts

20:43:12.761 GET 404 font 1.0 KB 34 ms 5 alerts

20:43:12.821 GET 404 font 1.0 KB 51 ms 5 alerts

20:43:12.823 GET 200 img 20.9 KB 47 ms 5 alerts

20:43:12.823 GET 200 img 20.9 KB 49 ms 5 alerts

20:43:12.834 GET 404 script 0 B 0 ms 5 alerts

20:43:12.836 GET 404 script 0 B 0 ms 5 alerts

20:43:12.868 GET 404 script 0 B 0 ms 5 alerts

20:43:12.869 GET 404 xhr 1.0 KB 40 ms 5 alerts

20:43:12.900 GET 404 font 1.0 KB 34 ms 5 alerts

20:43:12.901 GET 404 font 1.0 KB 36 ms 5 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://malimasak.net/themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.17.woff2

IP / ASN

64.89.163.46

Unknown

Requested by: https://malimasak.net/giris

Resource information

File type: HTML document, Unicode text, UTF-8 text
MIME type: text/html; charset=utf-8
First seen (UTC): 13 Sep 2026 · 08:09:42.070 UTC
Last seen (UTC): 14 Sep 2026 · 05:22:57.664 UTC
Times seen: 5

Size: 1.0 KB (1038 bytes)
MD5: 9d82572e7d2026ab5ada09c98aa0347a
SHA1: b981d0be613cfcf8a4f24bc640f9bff25689c287
SHA256: 00b3e82ed35c8dc2b0f7dca3c8ca7c12e56f215bfca297806480240ab3b3baef

Certificate information

Issuer: Let's Encrypt · YR1
Subject: malimasak.net
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 41:9B:96:16:8B:54:C6:A6:37:24:F2:AB:A9:CA:3F:F0:9A:D7:4D:E2
Valid from: Wed, 09 Sep 2026 08:48:49 GMT
Valid until: Tue, 08 Dec 2026 08:48:48 GMT

Technology fingerprints

Ubuntu (Operating systems)
Nginx:1.18.0 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - e-Devlet	medium	Phishing
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.17.woff2 HTTP/1.1
Host: malimasak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: identity
Sec-GPC: 1
Connection: keep-alive
Referer: https://malimasak.net/css/login-main.1.9.5.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 404 
server: nginx/1.18.0 (Ubuntu)
date: Sun, 13 Sep 2026 20:43:12 GMT
content-type: text/html; charset=utf-8
content-length: 1038
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-dns-prefetch-control: on
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
etag: W/"40e-uYHQvmE8/Pik8kvGQPm/8laJwoc"
vary: Accept-Encoding, Accept-Encoding
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff, nosniff
x-xss-protection: 0, 1; mode=block
X-Firefox-Spdy: h2

20:43:12.903 GET 404 font 1.0 KB 38 ms 5 alerts

20:43:12.904 GET 404 font 1.0 KB 39 ms 5 alerts

20:43:12.905 GET 404 font 1.0 KB 40 ms 5 alerts

20:43:12.906 GET 404 font 1.0 KB 43 ms 5 alerts

https://malimasak.net/giris

Domain graph

Hostnames

Connections