Report - www.homestlerskeses.xyz/bireysel/internet/

Report Overview

Submitted URL
www.homestlerskeses.xyz/bireysel/internet/
IP
141.95.14.172
ASN
#16276 OVH SAS
Submitted
2024-04-25 04:01:58
Access
public
Website Title
Hoş Geldiniz | Ziraat Bankası İnternet Bankacılığı
Final URL
www.homestlerskeses.xyz/bireysel/internet/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.homestlerskeses.xyz	unknown	unknown	No data	No data	10 kB	854 kB	141.95.14.172
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-23	417 B	90 kB	151.101.66.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	www.homestlerskeses.xyz/bireysel/internet/	Ziraat Bank
2024-04-24	medium	www.homestlerskeses.xyz/bireysel/internet/	Ziraat Bank

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.6.4.min.js	90 kB	2023-03-26	2024-05-04
Pretty URL code.jquery.com/jquery-3.6.4.min.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 04:59:07 Last Seen2024-05-04 19:57:08 Times Seen8453 Hash 641dd14370106e992d352166f5a07e99 eda46747c71d38a880bee44f9a439c3858bb8f99 a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af Loading...

	unknown	2.2 kB	2024-04-25	2024-04-25
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:02:05 Last Seen2024-04-25 06:02:05 Times Seen1 Hash 10a20d2c7fc4de33c7f610e474606435 e014222b26c3cabdd975ef2244d74162cd946e88 6b597b90b253431862d95b277f29cd4dc7a33c8430c9f451edbc7a4036827ac7 Loading...

	www.homestlerskeses.xyz/bireysel/internet/	131 kB	2024-04-25	2024-04-25
Pretty URL www.homestlerskeses.xyz/bireysel/internet/ IP 141.95.14.172 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 06:02:05 Last Seen2024-04-25 06:02:05 Times Seen1 Hash c824b0c59108110059707301505aba8b ce7c594dfde44e8e3bf44d0a6caa001f3e4269fb b2e77b875f62bd02572a8e5a26417366245b85e1aa343b5b0b1647e82ab04b57 Loading...

	www.homestlerskeses.xyz/bireysel/internet/client-side/script.js	4.4 kB	2024-04-25	2024-04-25
Pretty URL www.homestlerskeses.xyz/bireysel/internet/client-side/script.js IP 141.95.14.172 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:02:05 Last Seen2024-04-25 06:02:05 Times Seen1 Hash d775136d87e60f3cd123eef1f4ff138d ba2d4938341e4346e17d2f14c48f115d2a5df8b0 412ff7d7bf8e733faa2b4f589fd4e67ebe6f0cfcdde8021558021270d629a866 Loading...

		Size	First Seen	Last Seen
	#1 Write - 19e7154e91b0d7ac3362e11960ae14c2	48 kB	2024-04-25	2024-04-25
Pretty Observations First Seen2024-04-25 06:02:05 Last Seen2024-04-25 06:02:05 Times Seen1 Hash 19e7154e91b0d7ac3362e11960ae14c2 d9e589d77db6f97006344ed1dfd7488ee76d6c0f 5c343e49867691eedc06a96cbda14d7f7531dd6ec03dba6f15f3e7684f1f835b Loading...

HTTP Transactions (20)

URL IP Response Size

www.homestlerskeses.xyz/bireysel/internet/

141.95.14.172

200 OK

162 B

URL User Request GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Ziraat Bank

HTTP Headers

GET /bireysel/internet/ HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 25 Apr 2024 04:01:32 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.homestlerskeses.xyz/bireysel/internet/

www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/comodo-logo.png

141.95.14.172

200 OK

6.3 kB

URL GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/comodo-logo.png
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
PNG image data, 77 x 44, 8-bit/color RGBA, non-interlaced
Size
6.3 kB (6295 bytes)
Hash
cbdc765e52e5f7b375f2383106593f05
fe32420e40a43a85fbbabad75928ad08942c03a1
7bd1ce5e91f7fa685fe3ec37c7f79c27a49f3ae067afce596fa46bb5b2d90d89

HTTP Headers

GET /bireysel/internet/Content/assets/img/comodo-logo.png HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: image/png
content-length: 6295
last-modified: Fri, 29 Mar 2024 19:46:34 GMT
etag: "66071a9a-1897"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/phone.png

141.95.14.172

8.4 kB

URL
www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/phone.png
IP
141.95.14.172:0
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
PNG image data, 48 x 99, 8-bit/color RGBA, non-interlaced
Size
8.4 kB (8378 bytes)
Hash
77c1a0351dddb65a5f6fcdadf54ca5be
a278215761ef4768645ce1321629a2c12ea9d988
ecd0bd452254e541bd3e0f90384daf729c71bac57dcd6506ce531b82e91a6077

HTTP Headers

GET /bireysel/internet/Content/assets/img/phone.png HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: image/png
content-length: 8378
last-modified: Fri, 29 Mar 2024 19:46:44 GMT
etag: "66071aa4-20ba"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/login/phone.png

141.95.14.172

200 OK

9.8 kB

URL GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/login/phone.png
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
PNG image data, 48 x 99, 8-bit/color RGBA, non-interlaced
Size
9.8 kB (9783 bytes)
Hash
11054be60d9bcdcc073dd86b19eaeff5
0a3e9722e8215d52e257b870da7b04f988609b64
75e159dc563cef2d81dfc676edd0562791341ffc58e8fb9d377011d4fe0977ae

HTTP Headers

GET /bireysel/internet/Content/assets/img/login/phone.png HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: image/png
content-length: 9783
last-modified: Fri, 29 Mar 2024 19:46:26 GMT
etag: "66071a92-2637"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.6.4.min.js

151.101.66.137

200 OK

90 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.4.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
90 kB (89795 bytes)
Hash
641dd14370106e992d352166f5a07e99
eda46747c71d38a880bee44f9a439c3858bb8f99
a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af

HTTP Headers

GET /jquery-3.6.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: "28feccc0-15ec3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 25 Apr 2024 04:01:34 GMT
age: 1538240
x-served-by: cache-lga21953-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 2064, 123
x-timer: S1714017694.200803,VS0,VE0
vary: Accept-Encoding
content-length: 89795
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/bundle/css/sub.min.css

141.95.14.172

200 OK

167 kB

URL GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/Content/assets/bundle/css/sub.min.css
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
Unicode text, UTF-8 text, with very long lines (405), with CRLF line terminators
Size
167 kB (166863 bytes)
Hash
ee70e18431dc7239f2d0630388c99525
ae6facdbd2d9fee6ead9bee1f54dd6937b580708
5e85fef7b43537664d545d8f2a4eefc9f55219723ea35126ad24dd41aecb452d

HTTP Headers

GET /bireysel/internet/Content/assets/bundle/css/sub.min.css HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: text/css
last-modified: Fri, 29 Mar 2024 21:29:52 GMT
etag: W/"660732d0-8753d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/css/webfonts/new/D40DF048D299CA4DD.woff2

141.95.14.172

14 kB

URL
www.homestlerskeses.xyz/bireysel/internet/Content/assets/css/webfonts/new/D40DF048D299CA4DD.woff2
IP
141.95.14.172:0
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
Web Open Font Format (Version 2), CFF, length 13476, version 3.13173
Size
14 kB (13476 bytes)
Hash
c7735d60da8580476a4a0cf8fcad2a20
01bb2b7f3a55789655f622130e652562da68deab
87066901222869bbc18ab6d6620daa3aeac78dad94f88233f14ff68bae4cb472

HTTP Headers

GET /bireysel/internet/Content/assets/css/webfonts/new/D40DF048D299CA4DD.woff2 HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/Content/assets/bundle/css/sub.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: font/woff2
content-length: 13476
last-modified: Fri, 29 Mar 2024 19:45:44 GMT
etag: "66071a68-34a4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/css/webfonts/new/BB78E1BCF28E9E4CC.woff2

141.95.14.172

14 kB

URL
www.homestlerskeses.xyz/bireysel/internet/Content/assets/css/webfonts/new/BB78E1BCF28E9E4CC.woff2
IP
141.95.14.172:0
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
Web Open Font Format (Version 2), CFF, length 13468, version 3.13173
Size
14 kB (13468 bytes)
Hash
258bc9481b04a70f90de84e933445da7
f02651019a9b4f4f02b6c1a83b3c954d37129c9a
2f9071e4de731c949bee363cc182a5b88e61caa7cffbfd3ccf7321ca11327544

HTTP Headers

GET /bireysel/internet/Content/assets/css/webfonts/new/BB78E1BCF28E9E4CC.woff2 HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/Content/assets/bundle/css/sub.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: font/woff2
content-length: 13468
last-modified: Fri, 29 Mar 2024 19:45:40 GMT
etag: "66071a64-349c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/css/fonts/icomoon.woff2

141.95.14.172

100 kB

URL
www.homestlerskeses.xyz/bireysel/internet/Content/assets/css/fonts/icomoon.woff2
IP
141.95.14.172:0
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
Web Open Font Format (Version 2), TrueType, length 100000, version 1.0
Size
100 kB (100000 bytes)
Hash
a8fd26643e91f65ce225f959814f5024
9121db4aeda7b816ad442e5b66eb17b5063568f1
4eb0a95d46a2a21d2a033af489807a56e8669c172839474ed2ab8865ee40994f

HTTP Headers

GET /bireysel/internet/Content/assets/css/fonts/icomoon.woff2 HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/Content/assets/bundle/css/sub.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: font/woff2
content-length: 100000
last-modified: Fri, 29 Mar 2024 19:45:04 GMT
etag: "66071a40-186a0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/

141.95.14.172

200 OK

36 kB

URL User Request GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
HTML document, ASCII text, with very long lines (65486), with CRLF line terminators
Size
36 kB (35989 bytes)
Hash
426bef88ec1014ac233249ac870e436c
059e6c5f7dd12cc96cc65f647f2485ebd6ddada2
86b14d050b39f8b7944e375cd0a5ee948f0a853c0e0499a3425b84be3b2452ae

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Ziraat Bank

HTTP Headers

GET /bireysel/internet/ HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:33 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.18, PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/touch_icon.png

141.95.14.172

200 OK

25 kB

URL GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/touch_icon.png
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Size
25 kB (24678 bytes)
Hash
55083b4242e9e0a4be40324fc2b1d561
cdcd79c42cdb7239cbf3961916e62072c77c9154
3f57f2ca6d11bb33c055ec016ce0b3c7816097de2bdbdca444b11f0ba90bf166

HTTP Headers

GET /bireysel/internet/Content/assets/img/touch_icon.png HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: image/png
content-length: 24678
last-modified: Mon, 01 Apr 2024 14:19:16 GMT
etag: "660ac264-6066"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/process.php

141.95.14.172

200 OK

9.7 kB

URL POST HTTP/2
www.homestlerskeses.xyz/bireysel/internet/process.php
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
data
Size
9.7 kB (9723 bytes)
Hash
9d7e9f09793560cd1377f98237c2caa7
e0d9143c3989e3afdcc9dae785454eb80de86ddd
5ae32befbc7a94cd8e78f61025b3c4db3a07f07b47997d318633b327bfd8e86c

HTTP Headers

POST /bireysel/internet/process.php HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 25
Origin: https://www.homestlerskeses.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Cookie: PHPSESSID=fnad8tk7mvk0krf8hu8lvtikl1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:40 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-powered-by: PHP/8.2.18, PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/bundle/css/plugins.min.css

141.95.14.172

200 OK

350 kB

URL GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/Content/assets/bundle/css/plugins.min.css
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type

Size
350 kB (349614 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /bireysel/internet/Content/assets/bundle/css/plugins.min.css HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: text/css
last-modified: Fri, 29 Mar 2024 19:44:24 GMT
etag: W/"66071a18-555ae"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/login-bg.jpg?v=20181004

141.95.14.172

200 OK

107 kB

URL GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/Content/assets/img/login-bg.jpg?v=20181004
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2560x1440, components 3
Size
107 kB (106717 bytes)
Hash
dca8dcf5aa17b37001d2464c6e8df135
fb5b6ac4a585e88b3de8a5fbc3b2b14f597d5669
b055c452bbb3790a25caef40ba7e75a53f148ad46260c00719b5bd7b6ee90d82

HTTP Headers

GET /bireysel/internet/Content/assets/img/login-bg.jpg?v=20181004 HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/Content/assets/bundle/css/sub.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: image/jpeg
content-length: 106717
last-modified: Fri, 29 Mar 2024 19:46:38 GMT
etag: "66071a9e-1a0dd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/client-side/script.js

141.95.14.172

200 OK

4.4 kB

URL GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/client-side/script.js
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (4806), with no line terminators
Size
4.4 kB (4377 bytes)
Hash
4e0b7070fd0ce05f4b9794c8935089d2
8e2ede31cef9a29cc1d780d31fb4d48153e5492c
f18b88b922bf5ea078b943ef5462e073b07e61b9e2dcea6649d57417832572d2

HTTP Headers

GET /bireysel/internet/client-side/script.js HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 17:13:49 GMT
etag: W/"66293dcd-1119"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/check_ip.php

141.95.14.172

200 OK

0 B

URL GET HTTP/2
www.homestlerskeses.xyz/bireysel/internet/check_ip.php
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /bireysel/internet/check_ip.php HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:34 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.18, PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/status.php

141.95.14.172

200 OK

7 B

URL POST HTTP/2
www.homestlerskeses.xyz/bireysel/internet/status.php
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
27a21354321dfbc28f0cb17b995bb9ca
d1ffda5dc9903c9a42d66636aea9405e311c6f85
8e2c7ac508139a02af859de64a4743c1f3946837279332c35ec8f5ddf20654ae

HTTP Headers

POST /bireysel/internet/status.php HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.homestlerskeses.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Cookie: PHPSESSID=fnad8tk7mvk0krf8hu8lvtikl1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:43 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-powered-by: PHP/8.2.18, PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/status.php

141.95.14.172

200 OK

7 B

URL POST HTTP/2
www.homestlerskeses.xyz/bireysel/internet/status.php
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
27a21354321dfbc28f0cb17b995bb9ca
d1ffda5dc9903c9a42d66636aea9405e311c6f85
8e2c7ac508139a02af859de64a4743c1f3946837279332c35ec8f5ddf20654ae

HTTP Headers

POST /bireysel/internet/status.php HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.homestlerskeses.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Cookie: PHPSESSID=fnad8tk7mvk0krf8hu8lvtikl1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:46 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-powered-by: PHP/8.2.18, PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/status.php

141.95.14.172

200 OK

7 B

URL POST HTTP/2
www.homestlerskeses.xyz/bireysel/internet/status.php
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
27a21354321dfbc28f0cb17b995bb9ca
d1ffda5dc9903c9a42d66636aea9405e311c6f85
8e2c7ac508139a02af859de64a4743c1f3946837279332c35ec8f5ddf20654ae

HTTP Headers

POST /bireysel/internet/status.php HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.homestlerskeses.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Cookie: PHPSESSID=fnad8tk7mvk0krf8hu8lvtikl1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:52 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-powered-by: PHP/8.2.18, PleskLin
content-encoding: br
X-Firefox-Spdy: h2

www.homestlerskeses.xyz/bireysel/internet/status.php

141.95.14.172

200 OK

7 B

URL POST HTTP/2
www.homestlerskeses.xyz/bireysel/internet/status.php
IP
141.95.14.172:443
ASN
#16276 OVH SAS

Requested by
https://www.homestlerskeses.xyz/bireysel/internet/
Certificate
IssuerLet's Encrypt
Subjecthomestlerskeses.xyz
FingerprintB4:39:4A:33:2B:42:6A:F6:80:68:C2:88:89:1C:6E:DA:C6:1B:DE:2E
ValidityWed, 24 Apr 2024 16:10:28 GMT - Tue, 23 Jul 2024 16:10:27 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
27a21354321dfbc28f0cb17b995bb9ca
d1ffda5dc9903c9a42d66636aea9405e311c6f85
8e2c7ac508139a02af859de64a4743c1f3946837279332c35ec8f5ddf20654ae

HTTP Headers

POST /bireysel/internet/status.php HTTP/1.1
Host: www.homestlerskeses.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.homestlerskeses.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.homestlerskeses.xyz/bireysel/internet/
Cookie: PHPSESSID=fnad8tk7mvk0krf8hu8lvtikl1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 04:01:37 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-powered-by: PHP/8.2.18, PleskLin
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (20)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers