{"report_id":"5db73bc3-6478-4779-9f80-53fadc288db2","version":6,"status":"done","tags":["e-devlet","phishing","government","turkey"],"date":"2026-02-06T08:24:55Z","url":{"schema":"https","addr":"dosyatakipsistemi.com/giris.php","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"104.21.18.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dosyatakipsistemi.com/giris.php","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"title":"e-Devlet Kapısı","dom":{"size":15490,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1969)","md5":"eae67b4f7583b3cc69ac513d4dffb93b","sha1":"b7898c5fdb33e051df67ac97fbeef1081f443df1","sha256":"371474d4a2c0ca99991ed05cbf32681036b87c43d9b92033907afd4588904f7d","sha512":"e29241a896414c03581ec0b3ec4e6c6ccbd2006e66030b75b8b4c8065067379bbd35cb9b40d28f1627890566baa9e75313bb9865c865382647380ce6f11537f4","ssdeep":"192:dSKr9wFJT39PO/NbzAhcCQtpj+wOTWnQK02P5p8lk2Ev+f7Qc0xE01ppIEmpNRd5:tqpPINMhcNNOkQu5bv+Em3Rp4F6","tlshash":"d962647061ea1837d54bc9986e74a73a2baac263cd0be844b7fc57c92fe0d44894721d","dom_hash":"domhash6fb366f6fed28f35a55bb4044a47d437","first_seen":"2025-12-10T04:05:19.7143Z","last_seen":"2026-03-03T07:21:39.764822Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dosyatakipsistemi.com/giris.php","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"104.21.18.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T08:24:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]},"summary":[{"fqdn":"dosyatakipsistemi.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-06T03:12:24.285817Z","last_seen":"2026-02-06T03:12:24.285817Z","alert_count":104,"request_count":26,"received_data":589840,"sent_data":15229,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/js/es/jquery.jcryption.js","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09fb34e722b4b10fd3e28d1934d38e34","sha1":"f9fdcea12b3162a53e87bb8adb4c30e49b306ec8","sha256":"790c8abfa03882377c7a9302bdb14dd1c3dab477280255161bc016d7b5f3b121","sha512":"d8e1d0019f0de77c42bfd4dbb819086b7d7d52bec9f185e20d4759e0db9000371388d4300a47bb42304327289144de236d72d4b3d77a9dbdde09bcc2da86e453","ssdeep":"1536:bDq7WZd3KCPp2UuP6yf8h5z5h3+3nqQ5voBE42RvJFq:i6P9Pp2UuPVf8h5z5tOnqwAE4h","tlshash":"2353e98975d9b4610392a0b4063f054af23a756d181f54fcf669c8e2bcb89cd913bfb8","size":66533,"data":"","first_seen":"2023-03-07T13:45:57Z","last_seen":"2026-07-01T19:35:43.33509Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/giris.php","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea63b7f9425f6539d5a23a6150303fc1","sha1":"3939794325a81fae98f671c9e20eb5eab0086ec3","sha256":"8141df2e23908a2027c5f08a6bc4568317698d1f16bbd9d0fe82b7a9727748a7","sha512":"7250e7b59492b7acd1cb1de15d4cecd82bd34c1944a6251bf66aaf76e793c7b85db76bb1cffc0643a4d57672436273c9a8f1daba6372bd6a56c7aa1f831c042e","ssdeep":"","tlshash":"d2d0805850a41765053be0340b4e8607623081034f65ef163d4c01d47f1d5bfc5f55fe","size":234,"data":"","first_seen":"2025-12-10T04:05:19.73523Z","last_seen":"2026-03-03T07:21:39.782822Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/js/es/edk-giris.1.9.5.js","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8de38b1bf161b6b64c63d8b740e5e21","sha1":"839ca87f56b7d4f40b1db203c618203c8a57785d","sha256":"5321407b0003dfc9bfbf7aca90dd30627e4713155f079a6d36e14cda038c0662","sha512":"1f5e5ee11827985e851baf5fca55d61c603748b9ec206f1eb4c85f007313814ea558f1bf7c83040fff06b3b7d87bd14a9f0e705fffe4995a5c76ffa478c381ed","ssdeep":"96:/+OSl+JnkXjKU6VdoUrgpMUrgEBzf04citbd0qS7Wyl+h0JE5l3QSubN1Pwgvaf:/SlCk+U6VdoUw4Fih0qS7Wy1cZuxhvaf","tlshash":"f0f198acb24521a383e321f5841f9101a12f48758f578126e02da6e62fbdd0b1c7bf7e","size":7668,"data":"","first_seen":"2024-08-20T13:01:43.767289Z","last_seen":"2026-07-01T19:35:43.33568Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/js/common.js","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e33becc1762e4f532e583dec44f10b2","sha1":"730e66ef9e1ec8fab49e677e9e23afd131e7b423","sha256":"a12b074c8eea0fd0328f14a6f3b9108aa3f52d7e80e05485f38171d11affea2e","sha512":"a46da68275b142551967de1261e945eea4b8acfb3dfc5fd0c52f486d6595cbb1c35b58853bf8abbf6a2cdb7d9d5930ba1b18be819472f60b7537889204cf5645","ssdeep":"3072:hltMgRH0ntz8th0PeDQ47GKElZJbGwQJvE:TtMU0ntzn2DQ47GKElZJbGU","tlshash":"eee309dd72c2b032177721ba007f250af236599a680d8414f125d8e9bdb8e4e927bf7d","size":143437,"data":"","first_seen":"2023-12-15T05:23:17Z","last_seen":"2026-07-01T19:35:43.334507Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/js/common.js","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/js/common.js HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 47793\r\nlast-modified: Mon, 11 Dec 2023 14:07:46 GMT\r\netag: \"2304e-60c3c754fd080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBsGX%2BRwyvh74tJS9s6C66a6%2BS1VFNIEniUG4wTsnLxHNT3sPVWGJsSzbxxUTB9xMKOnvuw74%2B4X97i1ILv0K6FpF%2FwMlUjrjEWy8V10NgcZi%2FY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940772b5656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"3e33becc1762e4f532e583dec44f10b2","sha1":"730e66ef9e1ec8fab49e677e9e23afd131e7b423","sha256":"a12b074c8eea0fd0328f14a6f3b9108aa3f52d7e80e05485f38171d11affea2e","sha512":"a46da68275b142551967de1261e945eea4b8acfb3dfc5fd0c52f486d6595cbb1c35b58853bf8abbf6a2cdb7d9d5930ba1b18be819472f60b7537889204cf5645","ssdeep":"3072:hltMgRH0ntz8th0PeDQ47GKElZJbGwQJvE:TtMU0ntzn2DQ47GKElZJbGU","tlshash":"eee309dd72c2b032177721ba007f250af236599a680d8414f125d8e9bdb8e4e927bf7d","first_seen":"2023-12-15T05:23:17Z","last_seen":"2026-07-01T19:35:43.334507Z","times_seen":40,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRNrZKF09E3HY4.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRNrZKF09E3HY4.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIR8XJXI2r78ySDm1F0sbjHuxZWRmQlNbvmAxZpyiUeJwHdFTDomH9lp0pxFUAOZ0PDNZS5F%2BkCrSJ4Mg5AJakNuhAHg5tAvLFc7yUm2zx29Iik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\netag: W/\"4ac4-5f63dc7dada80-gzip\"\r\ncf-ray: 9c9940781c1156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19140, version 1.0","md5":"b2ace7b9069352ce8287f4f9a6435e2e","sha1":"629e56ae923e5c9433a737a2bf968ca80719877d","sha256":"baa4939ce5526f6345842e8324ea0a248d0e139eef54fe377492fd44a79803a5","sha512":"104939a54931b7d32ac5a27531232fbaabfc51397e960aecb58961d85d80595805c330b68f52456a6e868ddcde6888cc589d77fb61ece00b4cdf4a4bc12c9b3e","ssdeep":"384:jRjSyWKtcgdIwmfii+4Tg/1RAhGneAhL6MckAMtRPNMBu14Ihx9lRJ/x:djSyPcgdIfTOA0neAcRuFkCzx//x","tlshash":"6982e01238394490e44a7ca71644512eaf3f798d3a45297ff20d7a8a3af4631d5eb54c","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.028203Z","times_seen":367,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9C1kiL2t2dkPJA.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9C1kiL2t2dkPJA.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IRZrNL9%2BK%2BwkjVKNFRG4696DERFsK9kV35JVQleK7BbisrM8PtAVE%2Fn8m2h0p%2FKY0X1crA4KRNZukirVVKwC%2FzHn%2F1S5jSJao3DWst5rcy94OMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\netag: W/\"4f94-5f63dc7dada80-gzip\"\r\ncf-ray: 9c9940783c2756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20372,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20372, version 1.0","md5":"d741c07b12195f652ed16fd7a91e478a","sha1":"7de6599ca1aff94e7b3576b285619a7364b34042","sha256":"9c6e2b09ac19fe1395ca10c2872f9b132eb136faedb9bd7896779453497fec87","sha512":"d196e497c3c3f2e49a6688bf89819b899ea93fe214ea0805a1da7002e654c9b7d745b7ecba6686794501aaa76df3b1e66564b2757c470153dcec288df1a507a4","ssdeep":"384:rP3hmu8+TdRuyEECtjjQP753vv8D+f7hu+IprnfoOCmwqIA26TSEQ1SE1Sra:jYu/cxECtjjQ58rproewqSKu1S/a","tlshash":"7592e1eb4809ba654c037eb075c4e47fd102b6f099fa7ac102c37e483ea5328d9469d7","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.025615Z","times_seen":308,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/grs-icon/edkicon.165.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/grs-icon/edkicon.165.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Thu, 14 Dec 2023 16:24:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2BGNJT3JvCvDiJYadSDFCB1XqPE7tdBoNt1j6B4qvleZdFsYdt%2BVAvpBpkAvhDrUB6FwubPg1ELTpNpsA6usgbFpIrXAsPsPB3ZS9Ui5xU4kozY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\netag: W/\"1cc4-60c7ab7980280-gzip\"\r\ncf-ray: 9c9940783c2b56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7364,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7364, version 1.0","md5":"4d71137eaa6b23c18ed7b0e0c791aaf6","sha1":"6ef11a4b030f809a0e2dc38833b0bf35fb4de844","sha256":"22d3ab917787db16d0e1d331270084d1179654a14e0a955ffd2fb1f8c2e67608","sha512":"f35588ba208c12a1bad6b4cd6c508fbbf7f63abe54e2de1b4df35badf603a9bdc2edc5e00e3e6eb0fe78923ade0732303bbef49e136982edac2946b0b49f8b65","ssdeep":"192:ItFgbUuSqAu2H9UBDYCXHYlpAYXhf+4UIdhJa8zoX:ItxupcyYCXHUhfNUUE","tlshash":"8de1bf2d12b0cd0dc869563b1ff68e868a3978360f6723107176c371f873509b6a9d2e","first_seen":"2024-08-20T15:20:20.970461Z","last_seen":"2026-03-03T07:21:39.777068Z","times_seen":6,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/js/common.js/themes/izmir/js/es/common_messages_tr.1.9.5.js","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/js/common.js/themes/izmir/js/es/common_messages_tr.1.9.5.js HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgZQmvkQoz8O8osnjk1lnYUZddda1UGX9E65OFv4nDPPn%2B8Mhx1r8%2BTkTRrHCyTrlXmg0lZI31BHOI6PGvf7c0VM0z2DVv3EyebxGEjoJe%2FNmDc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c9940794d4056bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-13T01:56:06.147057Z","times_seen":57222,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jtfT7KdTzuPYf5Sn0FOIUyIUAi9m5%2BVJFBjYayBoF1jpBDwzVlkuyARQ6yeumzRiI6WGA4EcO7AAs2YfJqeLP0chEVSbXEntevKe26j%2BOsFCaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"2564-5f63dc7dada80-gzip\"\r\ncf-ray: 9c99407a6e2656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9572, version 1.0","md5":"308d7d82bea788e1fd2afe36582e54fe","sha1":"8dc2e848c04091b5e58d30bfd9ea7d96dac918b9","sha256":"b1fd7ed49a8246ec384c86e59d428c8ab8bbcbb247eaa0f8866d92f47ce7b6f5","sha512":"8e75c8d8b4b1f11e125f627f46ebf02e8adbaedae15ec9ba2293c3c5d91fc1aa7f9abefc38f6670dc019f19031bcca045fdbe505b4638376c3c843cd5a230f3f","ssdeep":"192:KihC2pMqqO3GLENNS9iAFTTR+BzLTNsXNGyTK:KihC2pMqqTgNN96R+UXNFK","tlshash":"1012c03b9c11762ac98a517dfd7eeb435e6dc93a0e6802ade4d68500d60c00ea47e29a","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:14.999436Z","times_seen":385,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9CNkiL2t2dk.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9CNkiL2t2dk.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ud7%2Fb6HzMCcIqRHpCeJbTtv5GhlHFPVQR04lFWAFFG74ZOaffZWZ%2FIcxD5TFUpuuG4JCtCib6SodhnjO7BRoyhZMxKhPS6kOK2J3CZOEKQ96ios%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"26f4-5f63dc7dada80-gzip\"\r\ncf-ray: 9c99407a7e3956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9972, version 1.0","md5":"54734c4538a8ace156da21fa69c7346d","sha1":"77cb8a43290d748e3421d40dc79ac16046fefc1f","sha256":"ad13b3fe0d7ffedfef7b0495f001577ceafcf0da1691cccd060ce8171137e7b7","sha512":"528529123728b405a6ee4872eb4c0a689db4dacfb37df5c64d5a3166e56615aaf42964c3cc91f5d89f967a1c2d12c6692e8db01ef94b4b42fe945f155ec45808","ssdeep":"192:RMVl8fOWNyUVriWrxTDP8zJ/L4f0rXsBw2MuckdAQUukcB7:R+8frNXiWrxEJMf0TsB6uHSelB7","tlshash":"b922bfda7d1f50c7f00d882155ef43a324c4b8a4ebbaa64b0673b3927d4d22e6e553a4","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.037996Z","times_seen":348,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/istanbul/images/agencies/1.png","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/istanbul/images/agencies/1.png HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 6022\r\nlast-modified: Wed, 12 Nov 2025 20:08:10 GMT\r\netag: \"1786-6436b52cd1e80\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePyOVvju%2BNPNz6RN7kvTVnjTh8A4Sa5weNkGsLnPkt%2F6u1pWRgZjaualesIzsKlOZC%2FqIzLjkCRFkZO6KLTdQEeiYl%2BHI51dG2ZjgvTQFAMa0lQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940772b5456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 165 x 40, 8-bit colormap, non-interlaced","md5":"efc67fd002433bb1ab55c5ee61c73e7b","sha1":"4b59e19e56cde045cbd47887201bac048655d492","sha256":"0abebd9d53431caa6eaf64ea49661394c1ce502261fbd05b2550fbd8e1a1f8d2","sha512":"854316b1ddbc5376c909f7fa260594bb0f440d665c5916928284326a2ce03b36291598f27a91b8a4f917bb44dd76332c8f0992e307d0afd28a9fd20e0ab05329","ssdeep":"96:elfupqTW1S5ktuhTm8fkqzBMnz2NnKyJsG/j/kC3BMhsX1YbrX9e+aotdqGMX:p8aYktutFfkeBMn6NxJL/dislYbrXRtY","tlshash":"01c19ed58213dc50f1ba0619715822ef903168971b73e6e86c07b72b1281f6f3abc652","first_seen":"2025-10-21T12:28:42.34361Z","last_seen":"2026-03-03T07:21:39.780865Z","times_seen":6,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/js/common.js/themes/izmir/js/es/login_messages_tr.1.9.5.js","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/js/common.js/themes/izmir/js/es/login_messages_tr.1.9.5.js HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XK0lSCRYX5EHWIRb8u4hNjeLKeN7jpNaIpqsFIdu%2Bh7ken34H%2Bwd40wr%2FmRrv3KvbxlSQudEzLWCG%2BEXknGLNVMMJr02GR7j8UOIQIXbwk0wnXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c9940795d5656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-13T01:56:06.147057Z","times_seen":57222,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9C1kiL2t2dkPJA.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9C1kiL2t2dkPJA.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEweRUF3SzC03qL%2BCgxgcg7H3rjhFVVe%2FnxdqB7OnsApzMOICqXmgkdljN9Lshr0cpvWmUXeRwBM7yeWTAjHc0q6vnwi96FMuhA7OnkDRSfZK4k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"4f94-5f63dc7dada80-gzip\"\r\ncf-ray: 9c99407a8e3d56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20372,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20372, version 1.0","md5":"d741c07b12195f652ed16fd7a91e478a","sha1":"7de6599ca1aff94e7b3576b285619a7364b34042","sha256":"9c6e2b09ac19fe1395ca10c2872f9b132eb136faedb9bd7896779453497fec87","sha512":"d196e497c3c3f2e49a6688bf89819b899ea93fe214ea0805a1da7002e654c9b7d745b7ecba6686794501aaa76df3b1e66564b2757c470153dcec288df1a507a4","ssdeep":"384:rP3hmu8+TdRuyEECtjjQP753vv8D+f7hu+IprnfoOCmwqIA26TSEQ1SE1Sra:jYu/cxECtjjQ58rproewqSKu1S/a","tlshash":"7592e1eb4809ba654c037eb075c4e47fd102b6f099fa7ac102c37e483ea5328d9469d7","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.025615Z","times_seen":308,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/images/login/edk-logo.png","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/images/login/edk-logo.png HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 14141\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\netag: \"373d-5f63dc7dada80\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2FCTX0wZU%2Bv2DuP383qMgtwgXgFp1LMOogE7LhzqP1cGsHhBlUhyMg2lPQPzJ2OLtk7k6M9pQnzk%2BjaRUzLYw0LLe5ATe%2FPhhXZPaQWljD%2FZEnU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940772b5356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 490 x 128, 8-bit colormap, interlaced","md5":"41519b372a5ca2d953f4f9893bd254e7","sha1":"fdd6de81c7f472ad89866d4ad1f5570c2f20d3db","sha256":"1a2132f93bbd29cf21fb0417d75c3d9366c63cbca622d2e14f24ec9b4d2505f3","sha512":"4647277e5e0ae983ed236c3a2cf78c7ab3b08994e6fe89f068547a6a661cab22e63bca2d470d8b24354645c7314fc68adf4b8bf7cbb4e823f9e44b1cdd85e1ec","ssdeep":"384:4Y9dL3+Or394abiq5IwFEp0gmpviK1jleLobLXiwA/1ai92n8o4:4Ynua4a2KFEp0gmp5hlekbLSwA/IE28/","tlshash":"c352bf767413a04dc987e8b86d4069b638f4b5e6cc1d5f2ba2ccb71e6db36d83041a46","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-07-31T03:54:40.184039Z","times_seen":68,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/js/es/edk-giris.1.9.5.js","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/js/es/edk-giris.1.9.5.js HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2690\r\nlast-modified: Mon, 11 Dec 2023 14:06:40 GMT\r\netag: \"1df4-60c3c7160bc00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C6W1N1BPiNAmeqXC%2BWmN9V3GXxQEnLEHe7zCXGTxKHYhKtTaVrU4PKS5wqQOb5rKk3seqBV%2BPea%2BUoDTpWN1e7%2F%2BsQqOqCN7KsPtn5ecdVFMi90%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940772b5c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7656), with no line terminators","md5":"d8de38b1bf161b6b64c63d8b740e5e21","sha1":"839ca87f56b7d4f40b1db203c618203c8a57785d","sha256":"5321407b0003dfc9bfbf7aca90dd30627e4713155f079a6d36e14cda038c0662","sha512":"1f5e5ee11827985e851baf5fca55d61c603748b9ec206f1eb4c85f007313814ea558f1bf7c83040fff06b3b7d87bd14a9f0e705fffe4995a5c76ffa478c381ed","ssdeep":"96:/+OSl+JnkXjKU6VdoUrgpMUrgEBzf04citbd0qS7Wyl+h0JE5l3QSubN1Pwgvaf:/SlCk+U6VdoUw4Fih0qS7Wy1cZuxhvaf","tlshash":"f0f198acb24521a383e321f5841f9101a12f48758f578126e02da6e62fbdd0b1c7bf7e","first_seen":"2024-08-20T13:01:43.767289Z","last_seen":"2026-07-01T19:35:43.33568Z","times_seen":34,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQgg5P7AbHqWol4tTKNvJcopM45aIlL94nxSCdJPqvoNGWZ%2BRtBoRq2IQRbksznCKH5z5LZALrDuAsQ9GdXMXLcfJ1OiOHHdSXgrvevMgddLQZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\netag: W/\"2564-5f63dc7dada80-gzip\"\r\ncf-ray: 9c9940781c0b56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9572, version 1.0","md5":"308d7d82bea788e1fd2afe36582e54fe","sha1":"8dc2e848c04091b5e58d30bfd9ea7d96dac918b9","sha256":"b1fd7ed49a8246ec384c86e59d428c8ab8bbcbb247eaa0f8866d92f47ce7b6f5","sha512":"8e75c8d8b4b1f11e125f627f46ebf02e8adbaedae15ec9ba2293c3c5d91fc1aa7f9abefc38f6670dc019f19031bcca045fdbe505b4638376c3c843cd5a230f3f","ssdeep":"192:KihC2pMqqO3GLENNS9iAFTTR+BzLTNsXNGyTK:KihC2pMqqTgNN96R+UXNFK","tlshash":"1012c03b9c11762ac98a517dfd7eeb435e6dc93a0e6802ade4d68500d60c00ea47e29a","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:14.999436Z","times_seen":385,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9CNkiL2t2dk.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9CNkiL2t2dk.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdMycpnmLwJDxE%2BgItygc%2F2J8rzrVQHZSGRvlPHZpd1MiZbjWe3BJftspeJ8TYm1KA34vw%2BRsCQ6JsAow6PwLlh4ChIvnhPbVwwMVq41v4UoLrw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\netag: W/\"26f4-5f63dc7dada80-gzip\"\r\ncf-ray: 9c9940782c2456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9972, version 1.0","md5":"54734c4538a8ace156da21fa69c7346d","sha1":"77cb8a43290d748e3421d40dc79ac16046fefc1f","sha256":"ad13b3fe0d7ffedfef7b0495f001577ceafcf0da1691cccd060ce8171137e7b7","sha512":"528529123728b405a6ee4872eb4c0a689db4dacfb37df5c64d5a3166e56615aaf42964c3cc91f5d89f967a1c2d12c6692e8db01ef94b4b42fe945f155ec45808","ssdeep":"192:RMVl8fOWNyUVriWrxTDP8zJ/L4f0rXsBw2MuckdAQUukcB7:R+8frNXiWrxEJMf0TsB6uHSelB7","tlshash":"b922bfda7d1f50c7f00d882155ef43a324c4b8a4ebbaa64b0673b3927d4d22e6e553a4","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.037996Z","times_seen":348,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/images/favicons/favicon-196x196.png","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/images/favicons/favicon-196x196.png HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 38550\r\nlast-modified: Fri, 05 Jan 2018 14:42:28 GMT\r\netag: \"9696-5620875225d00\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2F2nuGEU3mgSWTJFDVPxAGOwfeH%2BUt6FDNtJ%2BQIcLdxSdmA2i0PO5BCGsVIdAeLK36AFJIeMaTAOc%2Boxu8yVM%2F0cSuYzt8usGB09JdVrDaipuXI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940790d1c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGBA, interlaced","md5":"a13152299a686cdcdd20a1adc946acf3","sha1":"ce8e689627ed90a1492e1fda9fb1efe7ead926f7","sha256":"06d6c87b2737c211c6f88a02a6368b33d7b86d8fe024e53f98a8dd9039d71239","sha512":"c6075cffb53cbd25219de4a44094662b58af46524f4c8cf9aff2ee952ec5ff5cc4822d2c62e2b80e003d53a5170af95b400c9b705b2f7662992f8ec914c5c11e","ssdeep":"768:WfsaAn77REMI0/oHfogxTtPbRk/NQ5QgKeAsL9NQl/y2Z5tQzb5t:WfsaA/REMIYoHf5BtNWgU+QB/5at","tlshash":"bf03f2c13d9f157a08373997c4c92017263e16364dd31ea97ec45a79383b38766c8ae5","first_seen":"2024-08-20T10:14:52.323606Z","last_seen":"2026-03-03T07:21:39.767474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRNrZKF09E3HY4.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRNrZKF09E3HY4.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCWCkQJ16P%2Bqsfmi3NWlQvCcuHSnOU0mbrnTLhugKGzvR3QPy%2BC5n8kiNR7wF15I70%2BK8WmVEnSvFNBYqVgJAIAtV%2FMC3epRQ4gbt084Bxl841k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"4ac4-5f63dc7dada80-gzip\"\r\ncf-ray: 9c99407a6e2c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19140, version 1.0","md5":"b2ace7b9069352ce8287f4f9a6435e2e","sha1":"629e56ae923e5c9433a737a2bf968ca80719877d","sha256":"baa4939ce5526f6345842e8324ea0a248d0e139eef54fe377492fd44a79803a5","sha512":"104939a54931b7d32ac5a27531232fbaabfc51397e960aecb58961d85d80595805c330b68f52456a6e868ddcde6888cc589d77fb61ece00b4cdf4a4bc12c9b3e","ssdeep":"384:jRjSyWKtcgdIwmfii+4Tg/1RAhGneAhL6MckAMtRPNMBu14Ihx9lRJ/x:djSyPcgdIfTOA0neAcRuFkCzx//x","tlshash":"6982e01238394490e44a7ca71644512eaf3f798d3a45297ff20d7a8a3af4631d5eb54c","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.028203Z","times_seen":367,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sMzZCDf9_T_10XxCFuj5-v6dg.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sMzZCDf9_T_10XxCFuj5-v6dg.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQvfmM7IU4il%2FxK2S9m7NqhkqunmGoFVlbcf0GL8%2B5R6CmYT7SrqBzGhpTAGwQsfvUpiwnXdoF%2BGKQ97Kg0LW04%2BlpJp3Vehi%2BKpeunA8pI0tyo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"4a4c-5f63dc7dada80-gzip\"\r\ncf-ray: 9c99407a7e3856bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19020, version 1.0","md5":"ebbf9284ae822df4a26e536208d91832","sha1":"8616631c78c4bc063bf7080403a55ddea1c0423e","sha256":"1f634d0016221534cb3f7a6f0a369972d44cb2b5f7b5b17c70144be47791c882","sha512":"14d0061396065bc0eaab59d856f7f3741b2cd4c6b311fc96b50c3e6daf4e484494d3e774f2e0a00927d56f1c9b0aa2074eed2316a3f04182d45436d83c7d4173","ssdeep":"384:KsIqAMbai7M9bU1Zw+vmMhkpyGdL786abJKK4p:KsIqAMbaoMZU1S3MhkpyYL/abJKDp","tlshash":"4182d0be1263fa13e454a87ff953d3f96144313f9538e88d75b6800d164fa690f36886","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.024775Z","times_seen":368,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/giris.php","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T08:24:32.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /giris.php HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg; path=/\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3Lz0eBx23BMpC0IZJtJIrnGOevzMjDrla1baj%2BnnE1%2FIIsjzBYpL7PPW%2BWTDLJB3JLNe9ErWVKKEdWjwZQOhy22CdQvE2S06vakdOU%2FMCMmgkYZKw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c9940751c9675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12511,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d3f3a0c3a74b327431a89ac16dd64cdb","sha1":"5f450ebd5d94a79d077b6b47765a7ec63b655395","sha256":"e47f095436e3ec9a0358fda1f8c496b3d8657f5426ddd0de87a601d3a8b8f7b6","sha512":"c7d29d4b92c0ef3ffac9e43f5d0b2e0b5d7e067eae9766e73dda71c9d9c2cf1755db10f635d1e9e3d1e255bba4dd2e64fd9e50cae56cccc0fc2f171bb2854ca1","ssdeep":"192:zSBr9wFJT3HI/wCQtpj+wOTWnQK02P5p8lk2Ev+f7Qc0xE01ppIEmpNRdh:+qbI/wNNOkQu5bv+Em3RT","tlshash":"d742b69114f6287742035169afa9f6296f6ac133c604fc44b9bc1b8b3fd1ea589d321d","first_seen":"2025-12-10T04:05:19.730027Z","last_seen":"2026-03-03T07:21:39.77374Z","times_seen":5,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":64,"dns":42,"connect":1,"send":0,"wait":144,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/css/login-main.css HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 7841\r\nlast-modified: Thu, 14 Dec 2023 16:23:18 GMT\r\netag: \"be86-60c7ab38a6980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BwIm%2F3G0U1M%2BBiMRWLqO%2BpfrjhMbqPuvVS3mbBff27bPFwsEZ04qa%2BITuE5YiFmrD8%2B9whMB9SBW2hJ7VQ02I4EiuS4EWiuk0FxXxKJdO0h6VE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940772b5056bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48774,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48774), with no line terminators","md5":"4173f490932ba878fa1656411552e45c","sha1":"6df678f8888890add14540221f8d3df6aaddc5b3","sha256":"455f4a79bc3775d357bb1286a692a9786204dfc3e27e5ff962736598d9356842","sha512":"0830a5e85181a8c638bb651d0be3f3a34ab7e3f925899076e17384afd38bf1d7c4bca0a146555dad6ec701aa5852ba1bf3d5de69ddc8094a04d64b68391a69cf","ssdeep":"768:Wpt6p6RT45FTaRi4tZKtxRCdsep+t/WKyj8PrsuXxBAffPy2tJIb5drU+PpGq5pu:jGp","tlshash":"0d23983651a22688e16bcc5277c537ba2114c133c5170af8ea236f29c7db59f37a2b4d","first_seen":"2025-12-10T04:05:19.715582Z","last_seen":"2026-03-03T07:21:39.779638Z","times_seen":5,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/js/es/jquery.jcryption.js","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/js/es/jquery.jcryption.js HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21063\r\nlast-modified: Fri, 29 Sep 2023 15:08:58 GMT\r\netag: \"103e5-60680cdc3b680-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srpmkFykia3iC8TZQ0%2B4%2BBqJmEIsh%2Bfxyf1CFho8oeAjYONxznMMo6XIqCeUbLTAKmTcmJgBQNT%2FT8ZGu4xS9qldBPIm4IwL5iUF7pK6QAirHTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940772b5756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"09fb34e722b4b10fd3e28d1934d38e34","sha1":"f9fdcea12b3162a53e87bb8adb4c30e49b306ec8","sha256":"790c8abfa03882377c7a9302bdb14dd1c3dab477280255161bc016d7b5f3b121","sha512":"d8e1d0019f0de77c42bfd4dbb819086b7d7d52bec9f185e20d4759e0db9000371388d4300a47bb42304327289144de236d72d4b3d77a9dbdde09bcc2da86e453","ssdeep":"1536:bDq7WZd3KCPp2UuP6yf8h5z5h3+3nqQ5voBE42RvJFq:i6P9Pp2UuPVf8h5z5tOnqwAE4h","tlshash":"2353e98975d9b4610392a0b4063f054af23a756d181f54fcf669c8e2bcb89cd913bfb8","first_seen":"2023-03-07T13:45:57Z","last_seen":"2026-07-01T19:35:43.33509Z","times_seen":174,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sMzZCDf9_T_10ZxCFuj5-v.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sMzZCDf9_T_10ZxCFuj5-v.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ht9VkJx7cNiRDchPlKZKSKpiUyj2J0ynxrm6UJGJMdUqDiNysp%2FxdUiOTZuT5OxfX5JoLXEyNCJPSNP6j5JkZq6BoK7bphwTS2s%2BQ9MryDXu2M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\netag: W/\"2584-5f63dc7dada80-gzip\"\r\ncf-ray: 9c9940780c0956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9604, version 1.0","md5":"703d8707b09c729302a6d13fcd6bd431","sha1":"1bffa87f2ff421a2756f535090e2f95b8be5540b","sha256":"7d79596300bbb0d5208efbeb996a0dd57030fb5bed5f8d1ec3e909054c41ec72","sha512":"c80236ef26d99d8d355cc07a3c2914bdaf6a8076c789a5c619c6854cd14b413a1d185da0f791e194849f872599412a9274dbd10d67cfb820c589b7d63cc68bc4","ssdeep":"192:r0I4xdYMhTpt8Wi2G2uPUTqXoM7k5X4cWaUUOWdYThDqCy3EFOijs:r0rlhTpq3XPUTKoM7UIcWH7D/TFOJ","tlshash":"eb129ea04b300184da04733d3689c75fd5bb0858b8b663eabaf5165818528fa2dda47d","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.020543Z","times_seen":384,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sMzZCDf9_T_10XxCFuj5-v6dg.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sMzZCDf9_T_10XxCFuj5-v6dg.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLY1EkIuefePDj72i9qbzI65D3NY4VqxOfGaICNs%2FhO8nWm6kfj615ATyhzcd0XM3k3bydQ7Dtcc8e%2Brr2cOLTUKo4ZjXhb6g%2BJMSgaqEQQLf40%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\netag: W/\"4a4c-5f63dc7dada80-gzip\"\r\ncf-ray: 9c9940782c1256bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19020, version 1.0","md5":"ebbf9284ae822df4a26e536208d91832","sha1":"8616631c78c4bc063bf7080403a55ddea1c0423e","sha256":"1f634d0016221534cb3f7a6f0a369972d44cb2b5f7b5b17c70144be47791c882","sha512":"14d0061396065bc0eaab59d856f7f3741b2cd4c6b311fc96b50c3e6daf4e484494d3e774f2e0a00927d56f1c9b0aa2074eed2316a3f04182d45436d83c7d4173","ssdeep":"384:KsIqAMbai7M9bU1Zw+vmMhkpyGdL786abJKK4p:KsIqAMbaoMZU1S3MhkpyYL/abJKDp","tlshash":"4182d0be1263fa13e454a87ff953d3f96144313f9538e88d75b6800d164fa690f36886","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.024775Z","times_seen":368,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/images/favicons/favicon-196x196.png","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/images/favicons/favicon-196x196.png HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 38550\r\nlast-modified: Fri, 05 Jan 2018 14:42:28 GMT\r\netag: \"9696-5620875225d00\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2qcHKV0z3iIq4PMF5DHIg%2BlNSyYNk0sttorLR2ttWK1pqBSZWM9HwAziJeEpGp8hZfUnNIslJKGaJmyXyNQfwpCZ0FsprDkEq0SbSn1uUnmgis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940790d1b56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGBA, interlaced","md5":"a13152299a686cdcdd20a1adc946acf3","sha1":"ce8e689627ed90a1492e1fda9fb1efe7ead926f7","sha256":"06d6c87b2737c211c6f88a02a6368b33d7b86d8fe024e53f98a8dd9039d71239","sha512":"c6075cffb53cbd25219de4a44094662b58af46524f4c8cf9aff2ee952ec5ff5cc4822d2c62e2b80e003d53a5170af95b400c9b705b2f7662992f8ec914c5c11e","ssdeep":"768:WfsaAn77REMI0/oHfogxTtPbRk/NQ5QgKeAsL9NQl/y2Z5tQzb5t:WfsaA/REMIYoHf5BtNWgU+QB/5at","tlshash":"bf03f2c13d9f157a08373997c4c92017263e16364dd31ea97ec45a79383b38766c8ae5","first_seen":"2024-08-20T10:14:52.323606Z","last_seen":"2026-03-03T07:21:39.767474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/CryptoServlet?generateKeyPair=true\u0026pn=%2Fgiris.php\u0026ajax=1\u0026token=","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /CryptoServlet?generateKeyPair=true\u0026pn=%2Fgiris.php\u0026ajax=1\u0026token= HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OgKHlFJQad0ldt3nD%2BTSyWC3qByBmOOxRetydi%2FmkUF%2BuOkbWvgq5weaTymTE0LvBKZrDCHiRXzFyMQhokIF4AjqZcGmgXE2SUnlfWbShpAKMjo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c9940795d5756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-13T01:56:06.147057Z","times_seen":57222,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/izmir/fonts/arimo/P5sMzZCDf9_T_10ZxCFuj5-v.165.woff2","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/izmir/fonts/arimo/P5sMzZCDf9_T_10ZxCFuj5-v.165.woff2 HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/assets/devlet-themes/izmir/css/login-main.css\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\nlast-modified: Mon, 06 Mar 2023 16:28:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3JA%2BX1MCsnoef3Z%2BIFyi5rkHRjJ8TTqove%2BM0E%2F%2B%2Bwkov1uk4T2wn8VK%2BoBNjGYCsP4TAkL4Yhy2ivahQA%2B%2B6mwvS%2FCxucwzt4blP1y5Qma0lc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"2584-5f63dc7dada80-gzip\"\r\ncf-ray: 9c99407a6e2356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9604, version 1.0","md5":"703d8707b09c729302a6d13fcd6bd431","sha1":"1bffa87f2ff421a2756f535090e2f95b8be5540b","sha256":"7d79596300bbb0d5208efbeb996a0dd57030fb5bed5f8d1ec3e909054c41ec72","sha512":"c80236ef26d99d8d355cc07a3c2914bdaf6a8076c789a5c619c6854cd14b413a1d185da0f791e194849f872599412a9274dbd10d67cfb820c589b7d63cc68bc4","ssdeep":"192:r0I4xdYMhTpt8Wi2G2uPUTqXoM7k5X4cWaUUOWdYThDqCy3EFOijs:r0rlhTpq3XPUTKoM7UIcWH7D/TFOJ","tlshash":"eb129ea04b300184da04733d3689c75fd5bb0858b8b663eabaf5165818528fa2dda47d","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-08-01T17:40:15.020543Z","times_seen":384,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"dosyatakipsistemi.com/assets/devlet-themes/nevsehir/images/DDO-logo.png","fqdn":"dosyatakipsistemi.com","domain":"dosyatakipsistemi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dosyatakipsistemi.com/giris.php","date":"2026-02-06T08:24:33.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dosyatakipsistemi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 07:59:50 GMT","end":"Wed, 06 May 2026 08:58:14 GMT"},"fingerprint":{"sha1":"DB:50:79:45:49:40:9D:5D:5D:1C:A0:25:9D:F0:34:06:E9:A0:6B:70","sha256":"0E:19:9B:DC:BE:9D:46:0C:5F:B5:F6:12:9B:C3:FA:43:A4:A3:BB:3A:0D:C3:6E:62:B4:55:46:04:F6:47:FA:0D"}}},"request":{"raw":"GET /assets/devlet-themes/nevsehir/images/DDO-logo.png HTTP/1.1\r\nHost: dosyatakipsistemi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dosyatakipsistemi.com/giris.php\r\nCookie: uyapv24=t4rsgcllcb8lvg5p0ltnsleflg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 08:24:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 12307\r\nlast-modified: Mon, 16 Nov 2020 12:21:20 GMT\r\netag: \"3013-5b4386a693000\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLxLC7nlYIg6Ukw5mYkDsE5Qb3e8QRw2qd3wYGeqqFp%2FlxlMcVmahIcNHumqamV33Kw6ih8oxtV1y0XLO%2B6WLtE%2Be7%2FC%2B2syi%2BVI%2BU8hv26q4ts%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9940772b5556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 332 x 48, 8-bit/color RGBA, interlaced","md5":"096ea729a6210a761b8854bd9e0a00c9","sha1":"37b13451b425767173946cf87d131c3aae044271","sha256":"ae8ec8fc649dde297c50e98a3510c27a6505b9462c2eef7d178af35a6a868ed9","sha512":"23d0e6bc44c1cbf296bdeda9f4ea9ba98c6719fe952d0924ec5e4915bb722b0cfa9435ea6753169b75278809aed67eb70e83247288e9ca569eff715f915c07d7","ssdeep":"384:U9xjyTd1PQCSNqMOvB5QY75v51dcy/+vthDibl:U+TddQt4MsB5b7JdlqDDibl","tlshash":"bb42a067db056172eedebbb106518503df34eac1d0aaa389163da7410f3d7b48b2b485","first_seen":"2024-02-05T15:17:57Z","last_seen":"2026-03-03T07:21:39.77479Z","times_seen":8,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"dosyatakipsistemi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"dosyatakipsistemi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}}]}