{"report_id":"510f79b3-4296-49f8-8a08-3fd36cec7226","version":6,"status":"done","tags":[],"date":"2025-10-19T10:33:48Z","url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"title":"Şifre ile Giriş - Kolay ve Güvenli Erişim | VakıfBank"},"submit":{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-23T10:33:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app/","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"vakifmobil-kampanyalari.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-19T01:15:18.40576Z","last_seen":"2025-10-19T01:15:18.40576Z","alert_count":87,"request_count":29,"received_data":1839207,"sent_data":15727,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":2,"received_data":68226,"sent_data":1140,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":17354,"sent_data":600,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d791895d6201a6113f20a8a6723c8517","sha1":"db8001e49ae6e1b4bb1fc345a356563feace41bc","sha256":"5412df8c07c6af9d78a962721ce30845175549b90ffd19b5396085120e35c976","sha512":"a31ab515d2939f1d432e18a25dc4b72a6967e3b00e48d374e127fb646368097bad6ee87fa2875b80951895143616ac2a9fde80d4c3cfcae8716092cd5df690ac","ssdeep":"","tlshash":"78f02b8c3c62f06737fa7638c2238a7f33a2070131c39528c606cc2428a09860c86c8e","size":445,"data":"","first_seen":"2025-09-19T13:56:53.298669Z","last_seen":"2025-10-20T13:51:54.458624Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eea0724052fca023c7e2c5a210dcd985","sha1":"346217db0a30ea97cbfc6c8b4ce7ab98e51bf70d","sha256":"904ca1dcbe3e14d384bf43032508a3feff1060f6570405f57b2d8e7227b2ba19","sha512":"f1d144d756c5c19e0095eee03fc00b1d97142ede8611a25b8c918e85611dbb22c5d2ebd700cfc7a138ddd51531790986547d2a5b322d7668e09f3d9b45d3c83d","ssdeep":"","tlshash":"dff0a35d3c56f46737f97535c227ce6f3355170175839524c645cc2578548c61886d4d","size":444,"data":"","first_seen":"2025-09-22T16:47:32.740023Z","last_seen":"2025-10-20T13:51:54.485237Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"126bad079852adceb7ab4a393614bf7b","sha1":"1c4879e966fd7815195b3b9b94ea221498773603","sha256":"398db9b413585ed9341dc5651921a821cf66bdd76e6f0b3e69265d3ebbb88aa0","sha512":"256c7cbae7a7f0b3af06589e3fe5eeab8e9a337898265cc65bab068fb4b15792793c7f971d53248007d26068b5e1576d029afdbcbc21bef4a36772cb4d5603e0","ssdeep":"","tlshash":"e7e0df1632d884e2828534367fd94214963e4af70dc92f30bc2c1a625f60af167fcfa4","size":423,"data":"","first_seen":"2025-07-06T12:59:53.026652Z","last_seen":"2025-10-20T13:51:54.50991Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-08-21T02:09:47.742841Z","times_seen":355086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"36f9d538cd69119b437d92ebb8de2d76","sha1":"24738ebb5e3d81736f6d1a0cd05f949621c83622","sha256":"7c399a3e169a587acce71819f7b979c458847e95fe42c43048d4e0d88aa2e631","sha512":"31e3c4a8991b883af88a70a90d378d9bc5a760968d9d215ae49e718df8ab1f8ab7b8352caf5a0874f44086a913832c29b2078a929b9a5b3d9fcdc8af2c2bfb73","ssdeep":"","tlshash":"53e0265732e0083a46f7a9b631da9a547b6a001350819f4079fe8d414f82e94affbec8","size":332,"data":"","first_seen":"2025-07-06T12:59:53.027344Z","last_seen":"2025-10-20T13:51:54.523884Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f87bf85b6ebb15e3593843b07eb3c92","sha1":"091d88ef2d9e8eb4fc22ee54018c7cdf877268c7","sha256":"9fd07192d8f61f6eb3b671f2a46c0e6eabe4505f04782ba869306eb2ced11fb1","sha512":"bb586f5aa27e50ce47111a94fed92aacd8e14cea06463f542b7f885c135b432356fd4d1f417a8dfd827579caa29ec392a04c6f39ee3f733e6f236074d369f45a","ssdeep":"","tlshash":"cde0268732a0093144ff19f631da96443a6a00139445ef5039ed4e034f86dd0afff9c8","size":331,"data":"","first_seen":"2025-07-06T12:59:53.028015Z","last_seen":"2025-10-20T13:51:54.529539Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"628e113169dceadae2d31702936b8913","sha1":"2a6941a188e0cb4bcc4ba056f1bfb1af1a689c05","sha256":"585c37108392c698a1e131a003b33a7e648f287e0667a846aa5502cab0d648c7","sha512":"33d56cad7cad6f61922a03a4fc9b4ff8d8aa42795d6655be8d19c16225a242a59741c9fcd4342eaab9b856b005c1144070325e07d8edebc2bb352a795762da25","ssdeep":"","tlshash":"22e0dfa627a0093241ff14f733db96843a6a40135081db10799d5d120f82dd4aefaac9","size":343,"data":"","first_seen":"2025-07-06T12:59:53.029483Z","last_seen":"2025-10-20T13:51:54.548899Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b32ff5be8af5d2041f3418b75eeee79","sha1":"edb180875b6c3a5caf508ecf0b58a00cd38a5b69","sha256":"309e4013d5c711535854e1276c116f3c91ee5f2a455f6c277302cd878aaf4337","sha512":"fc16359e57a5d32b782a78d3c0e9e7dd05fbcdda613711482952a79251b69d9bdc87666e77325e44028ecfabdf2c724fd2c2dd44da83087a6151535b63dea9d0","ssdeep":"","tlshash":"032149ad10a310b18ba731b827cf800b72f894837485e4897cace941df52d7493e6fa6","size":1383,"data":"","first_seen":"2025-01-15T13:46:01.246172Z","last_seen":"2025-10-20T13:51:54.563531Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Bold.7c22a4dfdee2ff33.ttf","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Bold.7c22a4dfdee2ff33.ttf HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::dzxzj-1760870005909-9699539b58d6\r\ncontent-length: 180\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":180,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"eb73d50d45d216cd0fbe6b29647ca8a8","sha1":"10d365d1ee773d26036f82b91680053d29ac0294","sha256":"b9efe21337847242f641eb7de5a72518feb6eefc0fd5aa48717b69bdd99d7981","sha512":"bc2d244240d34ff66c5184f5169949e7ef69575dd2d2ab0a9b6feead30b907ec9a753d41038e08ecf887ccd7c5ba05094ba946965e1f99ea70d28c2ecd4c7d23","ssdeep":"","tlshash":"d9c080db11112141067043483bc13164359b7f9d34f79518d78de01bd9d5626d88719c","first_seen":"2025-09-22T16:47:32.72314Z","last_seen":"2025-10-20T13:51:54.023982Z","times_seen":21,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vakifmobil-kampanyalari.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:18:38 GMT\r\nexpires: Tue, 13 Oct 2026 23:18:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472488\r\nlast-modified: Mon, 08 Sep 2025 18:08:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-08-20T08:18:19.639054Z","times_seen":25742,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Bold.29ac6158e35aee95.woff","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Bold.29ac6158e35aee95.woff HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::8l7tl-1760870006225-13f1aeece83b\r\ncontent-length: 181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c3da38fe6421dfe578612226748b732a","sha1":"b071bca2225c6aed4748b280e54b87f317c19680","sha256":"40a3eb9313fc4472c3db1872994540d331e26bca1e66c297a42e945d16566c3c","sha512":"ad7f5d6e828025f5b5f9850d151e50ee08bbb8432f702612c37c9447b77795d4edb4eb551d07b7ebc6870aa5a08c29691c54617ff0377bf931d26ea3cca9acea","ssdeep":"","tlshash":"f6c080fe12117105077043053bc1219c75bb3bd925e69500da4de05bddd952ad48719c","first_seen":"2025-09-22T16:47:32.720289Z","last_seen":"2025-10-20T13:51:54.066944Z","times_seen":21,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Black.6b7c1a4d1f9db85c.ttf","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Black.6b7c1a4d1f9db85c.ttf HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fkmq6-1760870006356-6a453aab021f\r\ncontent-length: 181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7e81732d4d2ebf4e74111e42c6020d48","sha1":"4d632aec07e757625d9672b3591156a52c433670","sha256":"e5b3da9cf519cddfe84a291a2d8551045e1e78802943a1d8a4d509df5f264e76","sha512":"32adf494b93f329ebe463b48b1f628bd3a58c151521c314c2e77282f350a96cde29d263ad03c53474bdb9ad36b36cf56fbc43c2d10c78a8ea03947c05f561263","ssdeep":"","tlshash":"7bc080da111411010670c3446ad521583abf3fed14f3d544df49e21bfdd9526d88755c","first_seen":"2025-09-22T16:47:32.704312Z","last_seen":"2025-10-20T13:51:54.170108Z","times_seen":21,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Bold.7c22a4dfdee2ff33.ttf","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Bold.7c22a4dfdee2ff33.ttf HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::xdpzz-1760870006381-37d0128182e0\r\ncontent-length: 180\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":180,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"eb73d50d45d216cd0fbe6b29647ca8a8","sha1":"10d365d1ee773d26036f82b91680053d29ac0294","sha256":"b9efe21337847242f641eb7de5a72518feb6eefc0fd5aa48717b69bdd99d7981","sha512":"bc2d244240d34ff66c5184f5169949e7ef69575dd2d2ab0a9b6feead30b907ec9a753d41038e08ecf887ccd7c5ba05094ba946965e1f99ea70d28c2ecd4c7d23","ssdeep":"","tlshash":"d9c080db11112141067043483bc13164359b7f9d34f79518d78de01bd9d5626d88719c","first_seen":"2025-09-22T16:47:32.72314Z","last_seen":"2025-10-20T13:51:54.023982Z","times_seen":21,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/assets/img/ui/login/qr/qr_entry_tr.svg","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:24.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/assets/img/ui/login/qr/qr_entry_tr.svg HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 19 Oct 2025 10:33:24 GMT\r\netag: W/\"8884-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::8ph8s-1760870004792-6c3b162ed805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":34948,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a70f72aeeb353992e45487e5a1bac2bf","sha1":"08184c2be72ef057108deec0b5fb20f2158d9532","sha256":"0c3fc2b849f80683c70ef5850febc41d6830a2f395bc975f27eacec0b03582dd","sha512":"d7c1e6fa7cf647404aab203810ea45d422763e2c29fa393777554788c86eb1fd76b621b7de49b4e99a3cc210cd7e73f9c2ba204947112c7bde14109717465962","ssdeep":"768:doQtYDeBEBzgy2px6vFqwvbtQBzWcCEuLNqpi2V:doQseBEB0fxHybh2V","tlshash":"14f2c7d41fa4a3f89788f4b85c21bad8775710ef7645a5aac792bd62688305cee31cc0","first_seen":"2025-09-22T16:47:32.716599Z","last_seen":"2025-10-20T13:51:54.239286Z","times_seen":21,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Bold.2a63183e6dff7d00.woff2","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Bold.2a63183e6dff7d00.woff2 HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::r52gg-1760870005577-61114aaa6e1f\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/google-play2.9aecef78db01f807.svg","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/google-play2.9aecef78db01f807.svg HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\netag: W/\"441e-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rc8t8-1760870005634-a2f95386ea35\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":17438,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2d3b256a050fedac7ef57d6cb1c82eb","sha1":"c4892ce1311c7b0c7a5ba38bb23434989c008b12","sha256":"c0aa1b3ba30b6364802634bb4722309cb90d5350fc7af35ba9abac552dbf08a9","sha512":"25e607820609ad85cf9495eca1e3c70083d437d9cf02b5f9948cf7ba9fc1b45adb6a51d3e5b9c29bdad09fd15e21792653c3628622efeff0590f28e9a74dfa51","ssdeep":"192:S8bUpaVrJ8CNovMYb1wjTBAn39/J+ifAuGtlktdLvAVebbK58mIpD:Zb9QpwjO39/cifMtKjsVpG","tlshash":"bd72a8e1339982f8f205bbf8dd1594b62e7b2cf57bc0c5a0c3a16e95d46209d4e88dc6","first_seen":"2025-09-22T16:47:32.710075Z","last_seen":"2025-10-20T13:51:53.996459Z","times_seen":21,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/huawei-download2.e475c05ac477629f.svg","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/huawei-download2.e475c05ac477629f.svg HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\netag: W/\"34fe-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::8l7tl-1760870005639-6b099dde7984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13566,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"836985e56113f851a1f1663a4034532a","sha1":"a96db6eb084dfa7e9dacdeb192c0c3cf73cfa0d8","sha256":"23b3a043e3f1e0147d7697b09ccbd66080dba98f8d81503855ed87b9cbd30660","sha512":"9f6a30689dd7d71c9434fc503280550b2e0b087dc4538b2afb862a6cd7e08b9f6b723948cf6fb274ad2391cef968c0c5cb66a07d3ecf9d0007f13aeb7fc4490c","ssdeep":"192:S8bd5EvtPrrCUgmKl0KZV/KlHfAuZh0ahMplkFm+MKHZQr+FlgkcoUhzAnaw8sb2:ZbditXCUG0m9SaYZ5Q6Xv2DwD2Ip1OB","tlshash":"ce5275d0275e93f4b502fbec8a1a1816fe1b24f9bf48cbeac3192d54e54644e89dc8d4","first_seen":"2025-09-22T16:47:32.712529Z","last_seen":"2025-10-20T13:51:54.129537Z","times_seen":21,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T10:33:24.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 19 Oct 2025 10:33:24 GMT\r\netag: W/\"4cb3c-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rc8t8-1760870004419-058c4bf332b7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314172,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6c0f59dfaa251d248d29fcf160ca51db","sha1":"80f4abb14be33d01d77c5dab2d61a1f9aa7ce54f","sha256":"80bf124b771bcf732a37065cc2b9fcc92598c0466ab2582d669b235fc303915d","sha512":"22fcd40e88b79b7d6a23d16c3fc227a6267129357d4f268f034addd3bd8e00b6b896e9c00f5b97380ac9f29b7ab30328c286fc723ef91ba2b51339d1dd67d345","ssdeep":"1536:v79oKNcSUA2QIGa35m6Bx87VrIrsvYL0aYVFfbrO4HvLNiMDSDNTxvCs2b/xWJBg:BQVjEbwpDZVgWnu","tlshash":"d364c0fb26930584ff9799641bee25582535d463e607dd1c7acca90d8fc0fe60ac23a2","first_seen":"2025-09-30T18:28:49.04021Z","last_seen":"2025-10-20T13:51:54.418453Z","times_seen":17,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":43,"dns":21,"connect":1,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app/","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Bold.29ac6158e35aee95.woff","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Bold.29ac6158e35aee95.woff HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::jhb9w-1760870005750-2c612ad63989\r\ncontent-length: 181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c3da38fe6421dfe578612226748b732a","sha1":"b071bca2225c6aed4748b280e54b87f317c19680","sha256":"40a3eb9313fc4472c3db1872994540d331e26bca1e66c297a42e945d16566c3c","sha512":"ad7f5d6e828025f5b5f9850d151e50ee08bbb8432f702612c37c9447b77795d4edb4eb551d07b7ebc6870aa5a08c29691c54617ff0377bf931d26ea3cca9acea","ssdeep":"","tlshash":"f6c080fe12117105077043053bc1219c75bb3bd925e69500da4de05bddd952ad48719c","first_seen":"2025-09-22T16:47:32.720289Z","last_seen":"2025-10-20T13:51:54.066944Z","times_seen":21,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Black.9a104ee07f7cfd52.woff","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Black.9a104ee07f7cfd52.woff HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::hs74q-1760870005739-b45a8eef3473\r\ncontent-length: 182\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":182,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"82de4bab279edb4550df9cf4b1915c22","sha1":"b6051a837f9c8de19fb5ebf4f951e66ae6857e8b","sha256":"71bb7cdb3c41506d7dfde4903e0366699a356ad11691888bbdb03f85b6c75e6c","sha512":"f08ede03f9835b9b8ee0069cc86b2b8d5ba08e3ffeecd9cce38283d6a071f533c8d950031274dba9fd539fabacf5b42233077237cdedb92b20d0449d75fa72db","ssdeep":"","tlshash":"b5c080ee111031010a7193542bc1325435ef3be919d36500ea9ef06feed9627c48f19c","first_seen":"2025-09-22T16:47:32.734431Z","last_seen":"2025-10-20T13:51:54.278697Z","times_seen":21,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Regular.9135eb6940282650.ttf","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Regular.9135eb6940282650.ttf HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fkmq6-1760870005899-b4a238d82c58\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Regular.4e7449338f3a9fee.woff2","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Regular.4e7449338f3a9fee.woff2 HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::8l7tl-1760870006062-4d23fbdab6c8\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Figtree:ital,wght@0,300..900;1,300..900\u0026family=Nunito:ital,wght@0,200..1000;1,200..1000\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:24.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Figtree:ital,wght@0,300..900;1,300..900\u0026family=Nunito:ital,wght@0,200..1000;1,200..1000\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Oct 2025 10:33:24 GMT\r\ndate: Sun, 19 Oct 2025 10:33:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16668,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"681508d46855fe129b08329f105b3b75","sha1":"33a6973d44079da4bd8c295545ad6a692ec4b767","sha256":"a7236c9a8ffc37c3cd64fe9276c2eec4b6f0e99a69b652be2a672e6a1c47f301","sha512":"32e8712830654fc01f4f24d39c346eb27bd7506455d5fcd8ac1eaf0423a3bb292a1223d5c87e760638720e3d353ee7d07e3e4f01f181ab90370ec5b441f1dd3d","ssdeep":"384:cy5M2ibEf6uLk/Ck8kE+kakl1k7qY4nkwkAkxwfww5w6wWwyNw/qY4TwhwBwq:O/1GPl2/fZJxFGtffNQYAER","tlshash":"7c721e91041b9044ab835cd223cf7e35fe4ea2507050c0b9bbfd9aabeddbc62526875c","first_seen":"2025-09-22T16:47:32.73815Z","last_seen":"2025-10-20T13:51:54.206138Z","times_seen":21,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":153,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/icon-shield.6611c24173c852b4.png","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/icon-shield.6611c24173c852b4.png HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\netag: W/\"1442-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::xk4rk-1760870005633-b58e94f765f4\r\ncontent-length: 5186\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 139 x 169, 8-bit/color RGBA, non-interlaced","md5":"94e628d8824d0838a48aeeaa3ea75d63","sha1":"62f455d79eb9479952db65d586f34d4cd4d5a165","sha256":"ecf0f6192658b9f4eb288b8353e2f84a4be9c3b2d8f0365f0539e7556558bf2b","sha512":"31a5e479a4471c0fef0787d2917618cd04fdf4d5793662e0fd9302e3844f9597ed71c255a65a453c38a5f77a193f9a1fd7eb139fed3d685cfd3a436b8701157f","ssdeep":"96:aM1UqWRAo50cYa5GdKKiuaX8oloaVxBId2XDfwPnZ2bDFhv8cnB+mbB:4BRAo50cYagziCao67c+xZdd","tlshash":"e9b17dcb23131492ddb929a7b1f443941302d1946fe683d2a53039bb8d5313af2e9b03","first_seen":"2023-04-30T20:29:21Z","last_seen":"2026-07-22T20:44:27.90883Z","times_seen":156,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:24.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/styles.e3f11a9fbd12fcf4.css HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 19 Oct 2025 10:33:24 GMT\r\netag: W/\"15978e-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::jhb9w-1760870004798-8929fba92a82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1415054,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f36503422e0f8fdeda39dddde0726069","sha1":"8e5b53a8a704c39caec7d5d39a278de8576cd847","sha256":"fd147ff8ec351b6562a0b4a368a25c2cd4a3c95de677b39f316e11dca6690fd6","sha512":"767d508cdd789b16ade8fd6ad93ca98e1b6eba07758700ef314535b20f49a0ef298a11eb68210ac890f3861a57ac65caae15728d40be6efdbd2bebd99efd3ca0","ssdeep":"12288:aMWkvGj6d5P1nqXL2q5L73qXEH5p5Y7FPlMaJQLr:ajkvlnqaqBDqXExY7F9MaGX","tlshash":"de254a72e540209db737c43fd5f1f69858ade243df224daaf096a12c8acd0c55266fac","first_seen":"2025-07-31T05:45:16.683828Z","last_seen":"2026-07-22T20:44:27.909975Z","times_seen":40,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/assets/img/logos/vakifbank-logo.svg","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:24.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/assets/img/logos/vakifbank-logo.svg HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 19 Oct 2025 10:33:24 GMT\r\netag: W/\"ebb-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rc8t8-1760870004790-dbf7dbaf4044\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3771,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d8308c9d2205b6619f1c3961f24864c","sha1":"72b34d654da2de6920df4cd52637480c953ecf48","sha256":"c45d9e26459d6847b01c75883c202249c82802a76bc8d7aa62a470c37e4f2708","sha512":"496b71a2e350f934a9810e0357bdbfbeace775aa586d17d8cb050dbdf30c5c5b34d1a3792904e66091198b09320cfc76777f029a81e8445246b52c4839df685c","ssdeep":"","tlshash":"dc71a6d40fb0519c6ccb5e6eef6529950b1ea0ffd6664280f66d9a092b675c0ec0ec20","first_seen":"2025-09-22T16:47:32.736809Z","last_seen":"2025-10-20T13:51:54.020695Z","times_seen":21,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/assets/img/logos/secure-globalsign-ssl.png","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:24.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/assets/img/logos/secure-globalsign-ssl.png HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\ndate: Sun, 19 Oct 2025 10:33:24 GMT\r\netag: W/\"25ff-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::l75kz-1760870004792-c90f2c1aac10\r\ncontent-length: 9727\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 212 x 81, 8-bit/color RGBA, non-interlaced","md5":"d3dd25ae3757889206a8d5cb8f8d3c0e","sha1":"a8465217c604f44d6e49ece0de05353aeadd17c8","sha256":"fedf4740b9ae487ac387afe5ac91b724a7a0c9fc05680b9f024ccc37ebb7772b","sha512":"f5727dcf1ffa952c0f0f6d017cdf13b4187271b0f2a6d976492ef0e93731cdaca83a547683292a3ce8eb769f26052512fe61a0df18a3fad7a8d223043921d232","ssdeep":"192:gD+pTFmWSDvQ7nu12MLEmYONLqCWFwEWpNs28Q6bij5SGY3L84oB:JpsW8vQTuNLsONGCuQNs2I2cl78nB","tlshash":"ae129e19ad801583e869b643e9ffd8cb643a04d0d9a1aee3eb5ec44fce011f156f614b","first_seen":"2023-04-30T20:29:21Z","last_seen":"2026-07-22T20:44:27.916431Z","times_seen":175,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Regular.4e7449338f3a9fee.woff2","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Regular.4e7449338f3a9fee.woff2 HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::hs74q-1760870005571-9b29032e5fe4\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/app-store.0d449d446685c42e.jpg","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/app-store.0d449d446685c42e.jpg HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-type: image/jpeg\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\netag: W/\"1458-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rslfg-1760870005638-b5b29b144b64\r\ncontent-length: 5208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5208,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 100x33, components 3","md5":"c4b51ffb80840a046834a1dcac758357","sha1":"26764146128d6ff6b0d2e4a8263dd63bdac49bae","sha256":"0e8c81e455a1c214d6907ace3553cba24d23ef771246e3776568a5dd9166585a","sha512":"6cfb0d064a4e90c0282c930a718310f951f7b6649cbd69889ef7927de512444d9c482095b2c268b1e9018a41864a1e819e5fff8d420e4a00d9f262d8b9b6213e","ssdeep":"96:QvAEjQYTWt0TQ/Jc1KGgTwCFT5ButyqdHfs4ObafId6X+JWzC94i+:pYQkTQR/wCFytpFs4ObafIYX+JWzth","tlshash":"95b15c338e825af08dac50f664117a66c1e76f606151670dfc3302d2f560dccb5da9d6","first_seen":"2023-04-30T20:29:21Z","last_seen":"2026-07-22T20:44:27.913687Z","times_seen":148,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Regular.4557104648f65fcc.woff","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Regular.4557104648f65fcc.woff HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fkmq6-1760870005739-bdcc4fb8ff07\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Bold.2a63183e6dff7d00.woff2","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Bold.2a63183e6dff7d00.woff2 HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fkmq6-1760870006062-828dcf9e959e\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Black.9a104ee07f7cfd52.woff","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Black.9a104ee07f7cfd52.woff HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::xdpzz-1760870006202-f438cc2ac8cc\r\ncontent-length: 182\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"82de4bab279edb4550df9cf4b1915c22","sha1":"b6051a837f9c8de19fb5ebf4f951e66ae6857e8b","sha256":"71bb7cdb3c41506d7dfde4903e0366699a356ad11691888bbdb03f85b6c75e6c","sha512":"f08ede03f9835b9b8ee0069cc86b2b8d5ba08e3ffeecd9cce38283d6a071f533c8d950031274dba9fd539fabacf5b42233077237cdedb92b20d0449d75fa72db","ssdeep":"","tlshash":"b5c080ee111031010a7193542bc1325435ef3be919d36500ea9ef06feed9627c48f19c","first_seen":"2025-09-22T16:47:32.734431Z","last_seen":"2025-10-20T13:51:54.278697Z","times_seen":21,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vakifmobil-kampanyalari.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472548\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-21T02:27:19.930296Z","times_seen":970910,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":116,"dns":0,"connect":28,"send":0,"wait":28,"receive":34,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Black.b4556791e2a9e005.woff2","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Black.b4556791e2a9e005.woff2 HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::dzxzj-1760870005575-0c37e542a246\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Black.b4556791e2a9e005.woff2","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Black.b4556791e2a9e005.woff2 HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::dzxzj-1760870006043-5f731d307ef5\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Regular.4557104648f65fcc.woff","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Regular.4557104648f65fcc.woff HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fkmq6-1760870006209-3f358d88daed\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Regular.9135eb6940282650.ttf","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Regular.9135eb6940282650.ttf HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::8l7tl-1760870006370-e5a584223a48\r\ncontent-length: 136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09005d6fef936ce5a95834a7c0abaa15","sha1":"eb2ecdeebf5a57c0bad441878c448373c7a8bafc","sha256":"01b2f090790df8e836d308cf5bb52ecd8fe650aa967bef4f85832d7f0436ef65","sha512":"2b06e05095784f12fa6e4db508d4802863bc854da6d4c98d2bbf67a990e3ed30ccbbeaa2db8d560fac88e47cd6921e79749b8002ec597dc1596a2ab633476ca2","ssdeep":"","tlshash":"1ac02b5a00014205053082005ec1625434df3b8a30f3c4406f82e017e8d460ac88728c","first_seen":"2023-04-16T13:45:54Z","last_seen":"2026-07-22T14:47:02.046986Z","times_seen":136,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/assets/img/icons/favicon.png","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:26.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/assets/img/icons/favicon.png HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::hzkqc-1760870006537-93785868e523\r\ncontent-length: 176\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":176,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"dfd96185a6c7f8181f17905a33ed5f25","sha1":"8f7c2a695a39698e54288f2a50ec47261f96bd60","sha256":"cf580cd8614f6029e78c5bc123044dac463d9c12a09e564335f935c4e796dffd","sha512":"3de8dbb3037c05fee629463989e76889266bd5dc64f0b833928685e8978245f9d8f05260af0dd30fef03bb7489366d5b60cf687bd6f5bc75a7c08617c524cebb","ssdeep":"","tlshash":"b3c080d9115021010b70e3447ec1315465573b9d1fe6d554b6c6d017fde4917c986174","first_seen":"2025-09-22T16:47:32.72947Z","last_seen":"2025-10-20T13:51:54.001918Z","times_seen":21,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/assets/img/logos/vakifbank-logo-white.svg","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:24.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/assets/img/logos/vakifbank-logo-white.svg HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 19 Oct 2025 10:33:24 GMT\r\netag: W/\"eb8-1668f272800\"\r\nlast-modified: Sat, 20 Oct 2018 01:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::hs74q-1760870004790-a5736a6a7167\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c03edac8155960a536113724558cb61","sha1":"8611d67725a56854ed0cf7772d03b9c7388adad5","sha256":"ab48060cdd17a84d6d550ea62cbf4ef9eb6f4830b71964c9ec29a063a6dde74a","sha512":"e7f78c95621d6874336e00119e3fe12bd0d7706736f8c06f38ad0bd8f19799c2de6402c8c4eb8ae4f6aee9a1d5d5576c9539fd8cfdcf434f4b81fa2a7acafcd0","ssdeep":"","tlshash":"b371a6e40fb0519c6ccb5e6eef6529950b1ea0ffd6664280f66d99092ba75c0ec0ec20","first_seen":"2023-07-25T09:59:48Z","last_seen":"2025-10-20T13:51:54.43841Z","times_seen":23,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vakifmobil-kampanyalari.vercel.app/bireysel/Roboto-Black.6b7c1a4d1f9db85c.ttf","fqdn":"vakifmobil-kampanyalari.vercel.app","domain":"vakifmobil-kampanyalari.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vakifmobil-kampanyalari.vercel.app/","date":"2025-10-19T10:33:25.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /bireysel/Roboto-Black.6b7c1a4d1f9db85c.ttf HTTP/1.1\r\nHost: vakifmobil-kampanyalari.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vakifmobil-kampanyalari.vercel.app/bireysel/styles.e3f11a9fbd12fcf4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Oct 2025 10:33:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::jhb9w-1760870005892-8bc61853362b\r\ncontent-length: 181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7e81732d4d2ebf4e74111e42c6020d48","sha1":"4d632aec07e757625d9672b3591156a52c433670","sha256":"e5b3da9cf519cddfe84a291a2d8551045e1e78802943a1d8a4d509df5f264e76","sha512":"32adf494b93f329ebe463b48b1f628bd3a58c151521c314c2e77282f350a96cde29d263ad03c53474bdb9ad36b36cf56fbc43c2d10c78a8ea03947c05f561263","ssdeep":"","tlshash":"7bc080da111411010670c3446ad521583abf3fed14f3d544df49e21bfdd9526d88755c","first_seen":"2025-09-22T16:47:32.704312Z","last_seen":"2025-10-20T13:51:54.170108Z","times_seen":21,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-19","alert":"Phishing - VakifBank","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"phishing","severity":"medium","comment":"VakifBank","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"vakifmobil-kampanyalari.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}