{"report_id":"bb6abe2d-84fe-4dc8-ac00-c0aff8b94939","version":0,"status":"done","tags":["e-devlet","phishing","government","turkey"],"date":"2026-06-20T08:16:27Z","url":{"schema":"http","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":0,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"final":{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"title":"e-Devlet Kapısı","dom":{"size":22896,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3897)","md5":"89994f2e1b25685c929c401c9a041105","sha1":"dacc2822acb11eee285f3c699ddc6931f838d348","sha256":"a32df10cc0cadaf89cbec6365980a1b77bdce4b51e59cfead73a1a94d1bcab9d","sha512":"7f1a47b5df8717edc2ffe2a0c8a22496dd268e40ca0d66d7077fe4315020f8a5e957dffc6db5b62dda09a02b00cf34055dbf9c3ad3fc23c81672784d07bd97f5","ssdeep":"384:tihq+mE/PENMhxMhcp97AAOozibgSd+Em3R+n4Fe4F6:tihqcwgR7AACbP+Em3RJ/4","tlshash":"aea25170a5ae183ad58fdc986a75933a6abac353cd0bd894b3fd83851fd0d848d4724c","dom_hash":"domhashaeac889ace8364a2fa28ed1e1efc7c1e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":0,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T08:16:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]},"summary":[{"fqdn":"www.turkiye.gov.tr","ip":{"addr":"94.55.118.33","port":443,"asn":47524,"as":"Turksat Uydu Haberlesme ve Kablo TV Isletme A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"2001-06-07","domain_rank":2524,"first_seen":"2013-01-22T05:56:32Z","last_seen":"2026-06-20T01:25:26.090299Z","alert_count":0,"request_count":1,"received_data":393,"sent_data":520,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.e-devlet.gov.tr","ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"domain_registered":"2001-06-07","domain_rank":712515,"first_seen":"2020-03-02T08:05:21Z","last_seen":"2026-06-20T01:25:26.019908Z","alert_count":0,"request_count":19,"received_data":455543,"sent_data":11355,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"toplukonuthemenbasvuru.live","ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-20T01:25:25.377991Z","last_seen":"2026-06-20T01:25:25.377991Z","alert_count":36,"request_count":12,"received_data":278284,"sent_data":6172,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"78abf099e7d7d18872d129d7218fc140","sha1":"75112dc837c79ec4bad7a1b4f8541396762ec07b","sha256":"67e300a36cfe96df064258c6ade0862f94e98f3f8230b8614c2b971ef225f446","sha512":"5ec211390205368d210df1a12714bab20871ee6249e06e7213fc31b3b932f11c3c73987cba400e8234c440e0f326a53fb0bc63935e0101835c812588ed6322c6","ssdeep":"","tlshash":"57f0a39d3c57b05737f97674c6238b6f3755070175c35528d645cc2468548da1846d4d","size":443,"data":"","first_seen":"2026-06-20T01:25:33.37752Z","last_seen":"2026-06-21T14:26:57.625582Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b02f90a08142ea7fda88571ba4cf06e","sha1":"f5361abe1385dcfcd43376a8fa19581dad0498d9","sha256":"0de785918d2290354eda3c0418301af7dc631fb205932f52f063ed433c9b958d","sha512":"8d6ef4f0cb2d9dd6a3134d06b480cdb4c927bd6b5aa691c84e8baa7f4ca809d4539179621707d0f2499f4cdaed093cd48061697761453f4e7a4ce406b2be76a1","ssdeep":"","tlshash":"b6d0805850a41665053be034074e4607623081034f65ef163d4c01d47f1d5bf85f55fe","size":227,"data":"","first_seen":"2026-06-20T01:25:33.379897Z","last_seen":"2026-06-21T14:26:57.626202Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ca7dcc8c2f86480da016111a086a3d5","sha1":"74beaac3e2a70b447d576f57cfb8af081a5bd8a1","sha256":"a2072f3486c831d06d2c3340264f6df573053aedbbec3eecca9c99d91ba12f6c","sha512":"6de5e3c8abede6150a22075992479cf442e17e9c007abf82ff59b1ac738220f917e2c21c0e5cc1a83a63723aee99507a64859b020f6f28678fb4e8cab8fb8011","ssdeep":"96:i2P5pPklk2Ev+f7QyllBlOzcwKbneS05dtE03/4GZnS+ppjEEmpNRdj:i2P5p8lk2Ev+f7QelBXb50xE0gGFS+pu","tlshash":"00b184885cfb65e0161374791bbfe10a7339c063540cde05bc1ca601bf89a3d96eaade","size":5559,"data":"","first_seen":"2026-06-20T01:25:33.382093Z","last_seen":"2026-06-21T14:26:57.6267Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ff4882f4c296362b9e0fa110f80ff19","sha1":"fb736c862148da72986c3dc879d2096e094ffac0","sha256":"444b6419864cb045de1ddbc2ba4e97b0684b6db69ca4d239a4c797301dc5e898","sha512":"b4c2d31ab07b88d952caf9b57b581cd4a8604c3b05952d0f1bd68a32c2994176bc82b10c24b58d32748aedebff66e47d683fb77b860f5e86c68e7e0909cd3489","ssdeep":"","tlshash":"12b02b782010d088ddcf0c2995e41363d01dc376e2343c62000600712041cc3011c7ec","size":128,"data":"","first_seen":"2026-06-20T01:25:33.393273Z","last_seen":"2026-06-21T14:26:57.62722Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/v67327c56f0bb4ef8b305cae61679db8f1769101564043","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dc6464da80362edfde8cd10567de865","sha1":"6323d6fde4148ae6e8daa0bbc813814b7e7c8d88","sha256":"e7aa4e094a5dab2c40e1be1fbf91c58b7e26423e48e188a485a72994e8d050b0","sha512":"add716638ec1c9777be9c6c2173ce721c11a08def58ea916041aa5c21175498ecab9b74b29988419e3fb03289e2999463fd85b63f3211abc17cc90bf1ee94dca","ssdeep":"384:B4K61zI7CIyN4UletDDG0l/nvqtLxnzU50c74MNKJM4e6GODfPOsWN69O90:kN4UwDDlIUsJXvfP1090","tlshash":"29d208edb590b13613f7a47240bf210bb33b756264894418e22bd5c12c78aeed257fad","size":30200,"data":"","first_seen":"2026-01-22T17:09:23.016308Z","last_seen":"2026-06-21T01:56:51.066765Z","times_seen":5248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"78abf099e7d7d18872d129d7218fc140","sha1":"75112dc837c79ec4bad7a1b4f8541396762ec07b","sha256":"67e300a36cfe96df064258c6ade0862f94e98f3f8230b8614c2b971ef225f446","sha512":"5ec211390205368d210df1a12714bab20871ee6249e06e7213fc31b3b932f11c3c73987cba400e8234c440e0f326a53fb0bc63935e0101835c812588ed6322c6","ssdeep":"","tlshash":"57f0a39d3c57b05737f97674c6238b6f3755070175c35528d645cc2468548da1846d4d","size":443,"data":"","first_seen":"2026-06-20T01:25:33.37752Z","last_seen":"2026-06-21T14:26:57.625582Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b02f90a08142ea7fda88571ba4cf06e","sha1":"f5361abe1385dcfcd43376a8fa19581dad0498d9","sha256":"0de785918d2290354eda3c0418301af7dc631fb205932f52f063ed433c9b958d","sha512":"8d6ef4f0cb2d9dd6a3134d06b480cdb4c927bd6b5aa691c84e8baa7f4ca809d4539179621707d0f2499f4cdaed093cd48061697761453f4e7a4ce406b2be76a1","ssdeep":"","tlshash":"b6d0805850a41665053be034074e4607623081034f65ef163d4c01d47f1d5bf85f55fe","size":227,"data":"","first_seen":"2026-06-20T01:25:33.379897Z","last_seen":"2026-06-21T14:26:57.626202Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ca7dcc8c2f86480da016111a086a3d5","sha1":"74beaac3e2a70b447d576f57cfb8af081a5bd8a1","sha256":"a2072f3486c831d06d2c3340264f6df573053aedbbec3eecca9c99d91ba12f6c","sha512":"6de5e3c8abede6150a22075992479cf442e17e9c007abf82ff59b1ac738220f917e2c21c0e5cc1a83a63723aee99507a64859b020f6f28678fb4e8cab8fb8011","ssdeep":"96:i2P5pPklk2Ev+f7QyllBlOzcwKbneS05dtE03/4GZnS+ppjEEmpNRdj:i2P5p8lk2Ev+f7QelBXb50xE0gGFS+pu","tlshash":"00b184885cfb65e0161374791bbfe10a7339c063540cde05bc1ca601bf89a3d96eaade","size":5559,"data":"","first_seen":"2026-06-20T01:25:33.382093Z","last_seen":"2026-06-21T14:26:57.6267Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ff4882f4c296362b9e0fa110f80ff19","sha1":"fb736c862148da72986c3dc879d2096e094ffac0","sha256":"444b6419864cb045de1ddbc2ba4e97b0684b6db69ca4d239a4c797301dc5e898","sha512":"b4c2d31ab07b88d952caf9b57b581cd4a8604c3b05952d0f1bd68a32c2994176bc82b10c24b58d32748aedebff66e47d683fb77b860f5e86c68e7e0909cd3489","ssdeep":"","tlshash":"12b02b782010d088ddcf0c2995e41363d01dc376e2343c62000600712041cc3011c7ec","size":128,"data":"","first_seen":"2026-06-20T01:25:33.393273Z","last_seen":"2026-06-21T14:26:57.62722Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/common.js.indir","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e33becc1762e4f532e583dec44f10b2","sha1":"730e66ef9e1ec8fab49e677e9e23afd131e7b423","sha256":"a12b074c8eea0fd0328f14a6f3b9108aa3f52d7e80e05485f38171d11affea2e","sha512":"a46da68275b142551967de1261e945eea4b8acfb3dfc5fd0c52f486d6595cbb1c35b58853bf8abbf6a2cdb7d9d5930ba1b18be819472f60b7537889204cf5645","ssdeep":"3072:hltMgRH0ntz8th0PeDQ47GKElZJbGwQJvE:TtMU0ntzn2DQ47GKElZJbGU","tlshash":"eee309dd72c2b032177721ba007f250af236599a680d8414f125d8e9bdb8e4e927bf7d","size":143437,"data":"","first_seen":"2023-12-15T05:23:17Z","last_seen":"2026-06-21T01:56:51.073473Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/jquery.jcryption.js.indir","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":false,"md5":"09fb34e722b4b10fd3e28d1934d38e34","sha1":"f9fdcea12b3162a53e87bb8adb4c30e49b306ec8","sha256":"790c8abfa03882377c7a9302bdb14dd1c3dab477280255161bc016d7b5f3b121","sha512":"d8e1d0019f0de77c42bfd4dbb819086b7d7d52bec9f185e20d4759e0db9000371388d4300a47bb42304327289144de236d72d4b3d77a9dbdde09bcc2da86e453","ssdeep":"1536:bDq7WZd3KCPp2UuP6yf8h5z5h3+3nqQ5voBE42RvJFq:i6P9Pp2UuPVf8h5z5tOnqwAE4h","tlshash":"2353e98975d9b4610392a0b4063f054af23a756d181f54fcf669c8e2bcb89cd913bfb8","size":66533,"data":"","first_seen":"2023-03-07T13:45:57Z","last_seen":"2026-06-21T01:56:51.074458Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/edk-giris.1.9.5.js.indir","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8de38b1bf161b6b64c63d8b740e5e21","sha1":"839ca87f56b7d4f40b1db203c618203c8a57785d","sha256":"5321407b0003dfc9bfbf7aca90dd30627e4713155f079a6d36e14cda038c0662","sha512":"1f5e5ee11827985e851baf5fca55d61c603748b9ec206f1eb4c85f007313814ea558f1bf7c83040fff06b3b7d87bd14a9f0e705fffe4995a5c76ffa478c381ed","ssdeep":"96:/+OSl+JnkXjKU6VdoUrgpMUrgEBzf04citbd0qS7Wyl+h0JE5l3QSubN1Pwgvaf:/SlCk+U6VdoUw4Fih0qS7Wy1cZuxhvaf","tlshash":"f0f198acb24521a383e321f5841f9101a12f48758f578126e02da6e62fbdd0b1c7bf7e","size":7668,"data":"","first_seen":"2024-08-20T13:01:43.767289Z","last_seen":"2026-06-21T01:56:51.075164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"78abf099e7d7d18872d129d7218fc140","sha1":"75112dc837c79ec4bad7a1b4f8541396762ec07b","sha256":"67e300a36cfe96df064258c6ade0862f94e98f3f8230b8614c2b971ef225f446","sha512":"5ec211390205368d210df1a12714bab20871ee6249e06e7213fc31b3b932f11c3c73987cba400e8234c440e0f326a53fb0bc63935e0101835c812588ed6322c6","ssdeep":"","tlshash":"57f0a39d3c57b05737f97674c6238b6f3755070175c35528d645cc2468548da1846d4d","size":443,"data":"","first_seen":"2026-06-20T01:25:33.37752Z","last_seen":"2026-06-21T14:26:57.625582Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b02f90a08142ea7fda88571ba4cf06e","sha1":"f5361abe1385dcfcd43376a8fa19581dad0498d9","sha256":"0de785918d2290354eda3c0418301af7dc631fb205932f52f063ed433c9b958d","sha512":"8d6ef4f0cb2d9dd6a3134d06b480cdb4c927bd6b5aa691c84e8baa7f4ca809d4539179621707d0f2499f4cdaed093cd48061697761453f4e7a4ce406b2be76a1","ssdeep":"","tlshash":"b6d0805850a41665053be034074e4607623081034f65ef163d4c01d47f1d5bf85f55fe","size":227,"data":"","first_seen":"2026-06-20T01:25:33.379897Z","last_seen":"2026-06-21T14:26:57.626202Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ca7dcc8c2f86480da016111a086a3d5","sha1":"74beaac3e2a70b447d576f57cfb8af081a5bd8a1","sha256":"a2072f3486c831d06d2c3340264f6df573053aedbbec3eecca9c99d91ba12f6c","sha512":"6de5e3c8abede6150a22075992479cf442e17e9c007abf82ff59b1ac738220f917e2c21c0e5cc1a83a63723aee99507a64859b020f6f28678fb4e8cab8fb8011","ssdeep":"96:i2P5pPklk2Ev+f7QyllBlOzcwKbneS05dtE03/4GZnS+ppjEEmpNRdj:i2P5p8lk2Ev+f7QelBXb50xE0gGFS+pu","tlshash":"00b184885cfb65e0161374791bbfe10a7339c063540cde05bc1ca601bf89a3d96eaade","size":5559,"data":"","first_seen":"2026-06-20T01:25:33.382093Z","last_seen":"2026-06-21T14:26:57.6267Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ff4882f4c296362b9e0fa110f80ff19","sha1":"fb736c862148da72986c3dc879d2096e094ffac0","sha256":"444b6419864cb045de1ddbc2ba4e97b0684b6db69ca4d239a4c797301dc5e898","sha512":"b4c2d31ab07b88d952caf9b57b581cd4a8604c3b05952d0f1bd68a32c2994176bc82b10c24b58d32748aedebff66e47d683fb77b860f5e86c68e7e0909cd3489","ssdeep":"","tlshash":"12b02b782010d088ddcf0c2995e41363d01dc376e2343c62000600712041cc3011c7ec","size":128,"data":"","first_seen":"2026-06-20T01:25:33.393273Z","last_seen":"2026-06-21T14:26:57.62722Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.512Z","timestamp":1781943371512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9572\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-2564\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d5043a4bd9f66e3ac6828400763d639782d9b4e4178f49982087eefa8246b6b169be710e5d915b2982911e7cb4a59377d; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1218\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: ff7d9ececd2c171f6741060ba2f7a47a\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9572,"size_decoded":10255,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9572, version 1.0","md5":"308d7d82bea788e1fd2afe36582e54fe","sha1":"8dc2e848c04091b5e58d30bfd9ea7d96dac918b9","sha256":"b1fd7ed49a8246ec384c86e59d428c8ab8bbcbb247eaa0f8866d92f47ce7b6f5","sha512":"8e75c8d8b4b1f11e125f627f46ebf02e8adbaedae15ec9ba2293c3c5d91fc1aa7f9abefc38f6670dc019f19031bcca045fdbe505b4638376c3c843cd5a230f3f","ssdeep":"192:KihC2pMqqO3GLENNS9iAFTTR+BzLTNsXNGyTK:KihC2pMqqTgNN96R+UXNFK","tlshash":"1012c03b9c11762ac98a517dfd7eeb435e6dc93a0e6802ade4d68500d60c00ea47e29a","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.613127Z","times_seen":357,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/nevsehir/images/SGB-logo.png","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.431Z","timestamp":1781943355431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/nevsehir/images/SGB-logo.png HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, User-Agent\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d06fc9543073fdcca076e7ddaeb625c11ca3b8fe6847d4c902ec12d2cb668e622b3e0e1977ef2932c377934ecbc77ea3f; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\netag: W/\"6a2c01cb-24b5\"\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\nx-mserver: TR-677, TR-677, 1218\r\ncontent-encoding: gzip\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 9339b35213e54c225062c7fedcaef863\r\ncache-control: max-age=259200\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=7776000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache-status: Edge : HIT,\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76187,"size_decoded":76223,"mime_type":"image/png","magic":"PNG image data, 709 x 172, 8-bit/color RGBA, interlaced","md5":"28644f3e87f800f65fb4cc120febe6c6","sha1":"ce2a62eb1c9b3d8eb02a49fa7de5725d11868ee9","sha256":"c78ef81450bdf24e3cd12176a8ed18806e5b0e39a518487500767596000b2895","sha512":"e1c275f2f2a18f21378435035bc0d4115d5935858dde65c04ba5d93932014d5cc5dd141d667daec509bc89fc50e8286084f79b1731eb76fb4fb53661924ef9e6","ssdeep":"1536:EXgAKJEpksM13dSeDiFKAEyXg8utqovfsAzamJBajlBQOiB/2h9ci06:haWe2yQLtqovf0mLajliOiQ/06","tlshash":"8273f2db51af8e66a3ee341d1823dceb6d0d4141686741a209dbf4ccb95e8f38cca342","first_seen":"2026-06-20T01:25:33.367123Z","last_seen":"2026-06-21T14:26:57.616677Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15672,"timings":{"blocked":15564,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sMzZCDf9_T_10ZxCFuj5-v.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.195Z","timestamp":1781943371195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sMzZCDf9_T_10ZxCFuj5-v.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9604\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-2584\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d0180474d427edb5f2ac59622fc0be00e7f5ec75ffb13a9da1b575c5a371b3d5015884eff8b8386639d7344f517f16836; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1216\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 4ffd3121554cf7962da08313dd9353b5\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9604,"size_decoded":10287,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9604, version 1.0","md5":"703d8707b09c729302a6d13fcd6bd431","sha1":"1bffa87f2ff421a2756f535090e2f95b8be5540b","sha256":"7d79596300bbb0d5208efbeb996a0dd57030fb5bed5f8d1ec3e909054c41ec72","sha512":"c80236ef26d99d8d355cc07a3c2914bdaf6a8076c789a5c619c6854cd14b413a1d185da0f791e194849f872599412a9274dbd10d67cfb820c589b7d63cc68bc4","ssdeep":"192:r0I4xdYMhTpt8Wi2G2uPUTqXoM7k5X4cWaUUOWdYThDqCy3EFOijs:r0rlhTpq3XPUTKoM7UIcWH7D/TFOJ","tlshash":"eb129ea04b300184da04733d3689c75fd5bb0858b8b663eabaf5165818528fa2dda47d","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.607854Z","times_seen":356,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRNrZKF09E3HY4.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.200Z","timestamp":1781943371200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRNrZKF09E3HY4.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19140\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-4ac4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6dc08e895101c35d87f247023089c640073fe0905bc98f4d9279c4ca7363d8f41ba36d3c0cc5fe81dff5ac5bc4c25f2445; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1215\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: caccfe99fa7a7df2dce4d0f6906e07a4\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19140,"size_decoded":19824,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19140, version 1.0","md5":"b2ace7b9069352ce8287f4f9a6435e2e","sha1":"629e56ae923e5c9433a737a2bf968ca80719877d","sha256":"baa4939ce5526f6345842e8324ea0a248d0e139eef54fe377492fd44a79803a5","sha512":"104939a54931b7d32ac5a27531232fbaabfc51397e960aecb58961d85d80595805c330b68f52456a6e868ddcde6888cc589d77fb61ece00b4cdf4a4bc12c9b3e","ssdeep":"384:jRjSyWKtcgdIwmfii+4Tg/1RAhGneAhL6MckAMtRPNMBu14Ihx9lRJ/x:djSyPcgdIfTOA0neAcRuFkCzx//x","tlshash":"6982e01238394490e44a7ca71644512eaf3f798d3a45297ff20d7a8a3af4631d5eb54c","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.613948Z","times_seen":339,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/common.js.indir/themes/izmir/js/es/login_messages_tr.1.9.5.js","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.223Z","timestamp":1781943371223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris_files/common.js.indir/themes/izmir/js/es/login_messages_tr.1.9.5.js HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Thu, 23 Apr 2026 13:37:39 GMT\r\netag: \"328-69ea20a3-e583cd086d53e398;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":665,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-06-22T07:57:46.237863Z","times_seen":37706,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/CryptoServlet?generateKeyPair=true\u0026pn=%2Fgiris.php\u0026ajax=1\u0026token=","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.225Z","timestamp":1781943371225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /CryptoServlet?generateKeyPair=true\u0026pn=%2Fgiris.php\u0026ajax=1\u0026token= HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Thu, 23 Apr 2026 13:37:39 GMT\r\netag: \"328-69ea20a3-e583cd086d53e398;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":665,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-06-22T07:57:46.237863Z","times_seen":37706,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/cdn-cgi/rum?","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:13.985Z","timestamp":1781943373985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nContent-Length: 1116\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Thu, 23 Apr 2026 13:37:39 GMT\r\netag: \"328-69ea20a3-e583cd086d53e398;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 20 Jun 2026 08:16:13 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":808,"size_decoded":665,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-06-22T07:57:46.237863Z","times_seen":37706,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/assets/tokilogo.webp","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.429Z","timestamp":1781943355429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /assets/tokilogo.webp HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Jun 2026 08:15:55 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 17 Jun 2026 12:05:16 GMT\r\netag: \"6d4-6a328d7c-e2b24457dad07a1e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1748\r\ndate: Sat, 20 Jun 2026 08:15:55 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1748,"size_decoded":2080,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f9bbec7d1aa121072b6db8f71519b0c","sha1":"f2bb129128236ef28f4c2b9db332a2f6672f9152","sha256":"ee4529e584c2bc2f9b625829d69b62a191b19042c52e5569b5f61231ab9dbdcf","sha512":"191af83e81af89f31380924fcfedd1ae046307c2fb4bf63c2a08f81f1d1e9317b2d845a53da1dcbc63610ed3186ea99065384e8966fac0cc3317c4d51f15a0cf","ssdeep":"","tlshash":"8d3128ef922f67afa98a9e471b0fae8b60d0bf51a6ca50c0c080d45d8184c4b201ccd8","first_seen":"2026-06-20T01:25:33.360111Z","last_seen":"2026-06-21T01:56:51.070636Z","times_seen":5,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.197Z","timestamp":1781943371197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRDrZKF09E3.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9572\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-2564\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d5043a4bd9f66e3ac6828400763d639782d9b4e4178f49982087eefa8246b6b169be710e5d915b2982911e7cb4a59377d; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1218\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: f4543f8b79975b2ed556fc26ecce0f66\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9572,"size_decoded":10255,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9572, version 1.0","md5":"308d7d82bea788e1fd2afe36582e54fe","sha1":"8dc2e848c04091b5e58d30bfd9ea7d96dac918b9","sha256":"b1fd7ed49a8246ec384c86e59d428c8ab8bbcbb247eaa0f8866d92f47ce7b6f5","sha512":"8e75c8d8b4b1f11e125f627f46ebf02e8adbaedae15ec9ba2293c3c5d91fc1aa7f9abefc38f6670dc019f19031bcca045fdbe505b4638376c3c843cd5a230f3f","ssdeep":"192:KihC2pMqqO3GLENNS9iAFTTR+BzLTNsXNGyTK:KihC2pMqqTgNN96R+UXNFK","tlshash":"1012c03b9c11762ac98a517dfd7eeb435e6dc93a0e6802ade4d68500d60c00ea47e29a","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.613127Z","times_seen":357,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9CNkiL2t2dk.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.205Z","timestamp":1781943371205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9CNkiL2t2dk.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9972\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-26f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d20904db4b3c8c7f055ce3877314a5c2a199140d4a3abfb854ff4f1978bc12052a926b5a53497ee91d0b893502b86b7f6; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1215\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 2b8f6bb33b05bdfd04433ac4fb0e5b3e\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9972,"size_decoded":10655,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9972, version 1.0","md5":"54734c4538a8ace156da21fa69c7346d","sha1":"77cb8a43290d748e3421d40dc79ac16046fefc1f","sha256":"ad13b3fe0d7ffedfef7b0495f001577ceafcf0da1691cccd060ce8171137e7b7","sha512":"528529123728b405a6ee4872eb4c0a689db4dacfb37df5c64d5a3166e56615aaf42964c3cc91f5d89f967a1c2d12c6692e8db01ef94b4b42fe945f155ec45808","ssdeep":"192:RMVl8fOWNyUVriWrxTDP8zJ/L4f0rXsBw2MuckdAQUukcB7:R+8frNXiWrxEJMf0TsB6uHSelB7","tlshash":"b922bfda7d1f50c7f00d882155ef43a324c4b8a4ebbaa64b0673b3927d4d22e6e553a4","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.619567Z","times_seen":320,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/jquery.jcryption.js.indir","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.416Z","timestamp":1781943355416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris_files/jquery.jcryption.js.indir HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 17 Jun 2026 10:18:29 GMT\r\netag: \"103e5-6a327475-ca5f412c09a0b26;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 66533\r\ndate: Sat, 20 Jun 2026 08:15:55 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66533,"size_decoded":66802,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T09:29:48.149669Z","times_seen":16632516,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/grs-icon/edkicon.13.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.211Z","timestamp":1781943371211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/grs-icon/edkicon.13.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7308\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-1c8c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d470cdfc94f625651da3ca5fd95601d234c6ae5c81f0026c32a87fa912c7df7809f0e3c695d91ce4eb37d8230d314fbb8; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1215\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 711c9887c4c8e53ff7ac94e0c8230c46\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7308,"size_decoded":7991,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7308, version 1.0","md5":"438bc350dcd91e7a5b2590e19e6d88b3","sha1":"c94291b91847a95bb2f25944f835e3fdf7a51157","sha256":"758f30af35ced0082064101ef6957125a3fd007a5f5c8d7d74ef5c4cd4628a6a","sha512":"6d0a26513556d40f46e7633d91145842755f0859b8242238b31e89c0e763e30b02163196476bd75d13bb302c72c563047f8d9d98732418718ba05b4e5c307ac7","ssdeep":"96:Ihzk/Gq0qdKkm3e/WLzUqUwv/815jh+j2IqGXbaZJwMCEvKtruc3EFMSbYK2xDMO:IZNqlItLom85jvIHYbvKtacQ1bYVMnxg","tlshash":"c0e1ae0d6b86aae09377f5bc44d8b27cc9ea47ae9bbee041a9040a552ecb1720587d40","first_seen":"2026-06-20T01:25:33.375206Z","last_seen":"2026-06-21T14:26:57.615826Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sMzZCDf9_T_10ZxCFuj5-v.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.509Z","timestamp":1781943371509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sMzZCDf9_T_10ZxCFuj5-v.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9604\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-2584\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d0180474d427edb5f2ac59622fc0be00e7f5ec75ffb13a9da1b575c5a371b3d5015884eff8b8386639d7344f517f16836; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1216\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: ff33742c3a27ce27a43c4b3f31cbbaf0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9604,"size_decoded":10287,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9604, version 1.0","md5":"703d8707b09c729302a6d13fcd6bd431","sha1":"1bffa87f2ff421a2756f535090e2f95b8be5540b","sha256":"7d79596300bbb0d5208efbeb996a0dd57030fb5bed5f8d1ec3e909054c41ec72","sha512":"c80236ef26d99d8d355cc07a3c2914bdaf6a8076c789a5c619c6854cd14b413a1d185da0f791e194849f872599412a9274dbd10d67cfb820c589b7d63cc68bc4","ssdeep":"192:r0I4xdYMhTpt8Wi2G2uPUTqXoM7k5X4cWaUUOWdYThDqCy3EFOijs:r0rlhTpq3XPUTKoM7UIcWH7D/TFOJ","tlshash":"eb129ea04b300184da04733d3689c75fd5bb0858b8b663eabaf5165818528fa2dda47d","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.607854Z","times_seen":356,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.406Z","timestamp":1781943355406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/css/login-main.1.9.5.css HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 15:12:43 GMT\r\netag: W/\"6a32b96b-c8e2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nvary: Accept-Encoding, Accept-Encoding, User-Agent\r\nset-cookie: TS01551c83=015c1cbb6d0ace51ab5dec53a014a38b86e65c00d59e9e08d56f4dff1e3264ac05bdc9b3784e29186d4908f9ccc0afe0c3a4f0f5d6; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1215\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 8d7dd24be53ce802fd808f3760d760d0\r\ncache-control: max-age=259200\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=7776000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache-status: Edge : HIT,\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51426,"size_decoded":8528,"mime_type":"text/css","magic":"ASCII text, with very long lines (51426), with no line terminators","md5":"b22ae97847b4446362921b74e757e9a8","sha1":"ae74b5f3a68811fc8e3a937be43e863838240119","sha256":"a039da20404b7f07db19bfbb79baa26993d6f62b56dba430c0170fd6e49e7272","sha512":"cf98e01fdb6fd49c9ecd519f06e1e17e30a90dfe29009415532cebcb25a6cc170f9ce4c6f966fa43f44463ac93aab82747e3434190e64c9e4e77a8656c022da9","ssdeep":"768:W336p6RT45FTaRi4tZKtxRCdsep+t/WKyj8PrsuXxBAffPy2tJIb5drU+PXJn2pq:xJsi","tlshash":"df33973651a22688e1a7cc5277c53bba11548133c5170afcea236e29c7cb59f37b2b4d","first_seen":"2026-06-20T01:25:33.357844Z","last_seen":"2026-06-21T14:26:57.620259Z","times_seen":6,"resource_available":false,"data":null}},"time_used":30741,"timings":{"blocked":-1,"dns":15525,"connect":15147,"send":0,"wait":31,"receive":-1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/login_messages_tr.1.9.5.js.indir","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.411Z","timestamp":1781943355411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris_files/login_messages_tr.1.9.5.js.indir HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Thu, 23 Apr 2026 13:37:39 GMT\r\netag: \"328-69ea20a3-e583cd086d53e398;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 20 Jun 2026 08:15:55 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":665,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-06-22T07:57:46.237863Z","times_seen":37706,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/images/favicons/favicon-196x196.png","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:58.634Z","timestamp":1781943358634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/images/favicons/favicon-196x196.png HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, User-Agent\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d126a7ae0270d724a8a7e10ddb94a245479828a45631b93b1181afe1ba865fb7218ae6d35e2f057aa7bf23b250eb6e182; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1218\r\netag: W/\"6a297c09-69c2\"\r\nlast-modified: Wed, 10 Jun 2026 15:00:25 GMT\r\ncontent-encoding: gzip\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: ef8e127b345b623a209b0ddac730fc1f\r\ncache-control: max-age=259200\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=7776000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache-status: Edge : HIT,\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44328,"size_decoded":44746,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGBA, interlaced","md5":"a4d694f2c6626993b08d28d1455669b2","sha1":"5482da39108c631d79d6bf0389a029bb476bade4","sha256":"4f5a668e54b6efb0ccb2e05402e50aff103b79db98c4421bcee4f25f9fcc2942","sha512":"b2957b1b3ce3a725a832c7f3178a7b730347ed7316e3d9f015dd6110303bfa8b86bbabd512d673e4fb18fb5785c0679aa69b4ede0dad8c01866df52f7a842df5","ssdeep":"768:oPxXogVxmIuW1Sl4yJsT5bXV1Xg/Gs2vNHcabyMGuWPJhK97I2PmgcHMkDS:sY+mnsBJs2vHJWhhqE2OjS","tlshash":"2713f2c38c8c4922494b2ae6ae930a9fc53812450b5985f774df3a1273d47c0ee3c99b","first_seen":"2026-06-20T01:25:33.369866Z","last_seen":"2026-06-21T14:26:57.602756Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12400,"timings":{"blocked":12364,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9CNkiL2t2dk.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.519Z","timestamp":1781943371519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9CNkiL2t2dk.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9972\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-26f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d20904db4b3c8c7f055ce3877314a5c2a199140d4a3abfb854ff4f1978bc12052a926b5a53497ee91d0b893502b86b7f6; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1215\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 6d65bbcda2e5d346b68911781016abf9\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9972,"size_decoded":10655,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9972, version 1.0","md5":"54734c4538a8ace156da21fa69c7346d","sha1":"77cb8a43290d748e3421d40dc79ac16046fefc1f","sha256":"ad13b3fe0d7ffedfef7b0495f001577ceafcf0da1691cccd060ce8171137e7b7","sha512":"528529123728b405a6ee4872eb4c0a689db4dacfb37df5c64d5a3166e56615aaf42964c3cc91f5d89f967a1c2d12c6692e8db01ef94b4b42fe945f155ec45808","ssdeep":"192:RMVl8fOWNyUVriWrxTDP8zJ/L4f0rXsBw2MuckdAQUukcB7:R+8frNXiWrxEJMf0TsB6uHSelB7","tlshash":"b922bfda7d1f50c7f00d882155ef43a324c4b8a4ebbaa64b0673b3927d4d22e6e553a4","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.619567Z","times_seen":320,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/images/favicons/favicon-196x196.png","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:58.637Z","timestamp":1781943358637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/images/favicons/favicon-196x196.png HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, User-Agent\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d126a7ae0270d724a8a7e10ddb94a245479828a45631b93b1181afe1ba865fb7218ae6d35e2f057aa7bf23b250eb6e182; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1218\r\netag: W/\"6a297c09-69c2\"\r\nlast-modified: Wed, 10 Jun 2026 15:00:25 GMT\r\ncontent-encoding: gzip\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 88c0193227c4124a2bd022ed8a0c16a2\r\ncache-control: max-age=259200\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=7776000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache-status: Edge : HIT,\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44328,"size_decoded":44746,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGBA, interlaced","md5":"a4d694f2c6626993b08d28d1455669b2","sha1":"5482da39108c631d79d6bf0389a029bb476bade4","sha256":"4f5a668e54b6efb0ccb2e05402e50aff103b79db98c4421bcee4f25f9fcc2942","sha512":"b2957b1b3ce3a725a832c7f3178a7b730347ed7316e3d9f015dd6110303bfa8b86bbabd512d673e4fb18fb5785c0679aa69b4ede0dad8c01866df52f7a842df5","ssdeep":"768:oPxXogVxmIuW1Sl4yJsT5bXV1Xg/Gs2vNHcabyMGuWPJhK97I2PmgcHMkDS:sY+mnsBJs2vHJWhhqE2OjS","tlshash":"2713f2c38c8c4922494b2ae6ae930a9fc53812450b5985f774df3a1273d47c0ee3c99b","first_seen":"2026-06-20T01:25:33.369866Z","last_seen":"2026-06-21T14:26:57.602756Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12435,"timings":{"blocked":12364,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sMzZCDf9_T_10XxCFuj5-v6dg.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.203Z","timestamp":1781943371203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sMzZCDf9_T_10XxCFuj5-v6dg.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19020\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-4a4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6dee14901fb71e46497658e52c81268227f56a521a20539e6dbfd1a5cdfbe32fb38714fdcae8035a8f8328b293cde8f9ca; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1217\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: a1930a2bb1711bcad4acf90b228d2c0c\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19020,"size_decoded":19704,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19020, version 1.0","md5":"ebbf9284ae822df4a26e536208d91832","sha1":"8616631c78c4bc063bf7080403a55ddea1c0423e","sha256":"1f634d0016221534cb3f7a6f0a369972d44cb2b5f7b5b17c70144be47791c882","sha512":"14d0061396065bc0eaab59d856f7f3741b2cd4c6b311fc96b50c3e6daf4e484494d3e774f2e0a00927d56f1c9b0aa2074eed2316a3f04182d45436d83c7d4173","ssdeep":"384:KsIqAMbai7M9bU1Zw+vmMhkpyGdL786abJKK4p:KsIqAMbaoMZU1S3MhkpyYL/abJKDp","tlshash":"4182d0be1263fa13e454a87ff953d3f96144313f9538e88d75b6800d164fa690f36886","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.617456Z","times_seen":340,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9C1kiL2t2dkPJA.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.209Z","timestamp":1781943371209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9C1kiL2t2dkPJA.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20372\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-4f94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d7543e168ebb21881775815aabb82116b06e157971efd92b3f0ebf8bd777a4da18fadb74ba3b707f9ada256b2cacabc2f; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1218\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 4840892505e8353a2efd15706c2fcdfd\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20372,"size_decoded":21056,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20372, version 1.0","md5":"d741c07b12195f652ed16fd7a91e478a","sha1":"7de6599ca1aff94e7b3576b285619a7364b34042","sha256":"9c6e2b09ac19fe1395ca10c2872f9b132eb136faedb9bd7896779453497fec87","sha512":"d196e497c3c3f2e49a6688bf89819b899ea93fe214ea0805a1da7002e654c9b7d745b7ecba6686794501aaa76df3b1e66564b2757c470153dcec288df1a507a4","ssdeep":"384:rP3hmu8+TdRuyEECtjjQP753vv8D+f7hu+IprnfoOCmwqIA26TSEQ1SE1Sra:jYu/cxECtjjQ58rproewqSKu1S/a","tlshash":"7592e1eb4809ba654c037eb075c4e47fd102b6f099fa7ac102c37e483ea5328d9469d7","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.614549Z","times_seen":280,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sMzZCDf9_T_10XxCFuj5-v6dg.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.516Z","timestamp":1781943371516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sMzZCDf9_T_10XxCFuj5-v6dg.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19020\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-4a4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6dee14901fb71e46497658e52c81268227f56a521a20539e6dbfd1a5cdfbe32fb38714fdcae8035a8f8328b293cde8f9ca; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1217\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: fdc591214f4d756f1774a30f0d54bfd1\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19020,"size_decoded":19704,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19020, version 1.0","md5":"ebbf9284ae822df4a26e536208d91832","sha1":"8616631c78c4bc063bf7080403a55ddea1c0423e","sha256":"1f634d0016221534cb3f7a6f0a369972d44cb2b5f7b5b17c70144be47791c882","sha512":"14d0061396065bc0eaab59d856f7f3741b2cd4c6b311fc96b50c3e6daf4e484494d3e774f2e0a00927d56f1c9b0aa2074eed2316a3f04182d45436d83c7d4173","ssdeep":"384:KsIqAMbai7M9bU1Zw+vmMhkpyGdL786abJKK4p:KsIqAMbaoMZU1S3MhkpyYL/abJKDp","tlshash":"4182d0be1263fa13e454a87ff953d3f96144313f9538e88d75b6800d164fa690f36886","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.617456Z","times_seen":340,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/common.js.indir","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.414Z","timestamp":1781943355414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris_files/common.js.indir HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 17 Jun 2026 10:18:29 GMT\r\netag: \"2304e-6a327475-437ffe8f4129ffdc;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 143438\r\ndate: Sat, 20 Jun 2026 08:15:55 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":143438,"size_decoded":143709,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T09:29:48.149669Z","times_seen":16632516,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/nevsehir/images/turksat-logo.png","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.432Z","timestamp":1781943355432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/nevsehir/images/turksat-logo.png HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://www.turkiye.gov.tr/404.html\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nvary: Accept-Encoding, User-Agent\r\nset-cookie: TS01551c83=015c1cbb6d8ca38b318a97a2d395bbbf2fea314d49371ad1bfd943c8c8ce65fa0ee6b654eddaebbe3f89f3e0ceeccb7ff026e7df5a; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1215\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: 4baa67e6d76991519f7e64664c9f3fc2\r\ncache-control: no-cache, no-store\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=7776000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache-status: Edge : MISS, Midcache : MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T09:29:48.149669Z","times_seen":16632516,"resource_available":true,"data":null}},"time_used":15690,"timings":{"blocked":15564,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/common.js.indir/themes/izmir/js/es/common_messages_tr.1.9.5.js","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.220Z","timestamp":1781943371220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris_files/common.js.indir/themes/izmir/js/es/common_messages_tr.1.9.5.js HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Thu, 23 Apr 2026 13:37:39 GMT\r\netag: \"328-69ea20a3-e583cd086d53e398;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":808,"size_decoded":665,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-06-22T07:57:46.237863Z","times_seen":37706,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"www.turkiye.gov.tr/404.html","fqdn":"www.turkiye.gov.tr","domain":"turkiye.gov.tr","tld":"gov.tr"},"ip":{"addr":"94.55.118.33","port":443,"asn":47524,"as":"Turksat Uydu Haberlesme ve Kablo TV Isletme A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.228Z","timestamp":1781943371228,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /404.html HTTP/1.1\r\nHost: www.turkiye.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://toplukonuthemenbasvuru.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 02 Jun 2026 07:38:15 GMT\r\netag: W/\"6a1e8867-232f\"\r\ncontent-encoding: gzip\r\nset-cookie: TS015d3f68=015c1cbb6d91ff333934eeb38ce8ffb7b51c30ab0a1cae241213587cf7b4b8076eaf26a95e0b405a9ac7843355673e86f3c2e61d39; Path=/; Domain=.www.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T09:29:48.149669Z","times_seen":16632516,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRNrZKF09E3HY4.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.514Z","timestamp":1781943371514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sBzZCDf9_T_1Wi4TRNrZKF09E3HY4.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19140\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-4ac4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6dc08e895101c35d87f247023089c640073fe0905bc98f4d9279c4ca7363d8f41ba36d3c0cc5fe81dff5ac5bc4c25f2445; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1215\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: fbda5031a00e505ccefb32c0270fee48\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19140,"size_decoded":19824,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19140, version 1.0","md5":"b2ace7b9069352ce8287f4f9a6435e2e","sha1":"629e56ae923e5c9433a737a2bf968ca80719877d","sha256":"baa4939ce5526f6345842e8324ea0a248d0e139eef54fe377492fd44a79803a5","sha512":"104939a54931b7d32ac5a27531232fbaabfc51397e960aecb58961d85d80595805c330b68f52456a6e868ddcde6888cc589d77fb61ece00b4cdf4a4bc12c9b3e","ssdeep":"384:jRjSyWKtcgdIwmfii+4Tg/1RAhGneAhL6MckAMtRPNMBu14Ihx9lRJ/x:djSyPcgdIfTOA0neAcRuFkCzx//x","tlshash":"6982e01238394490e44a7ca71644512eaf3f798d3a45297ff20d7a8a3af4631d5eb54c","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.613948Z","times_seen":339,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9C1kiL2t2dkPJA.13.woff2","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:16:11.521Z","timestamp":1781943371521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/fonts/arimo/P5sCzZCDf9_T_10c9C1kiL2t2dkPJA.13.woff2 HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://toplukonuthemenbasvuru.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.e-devlet.gov.tr/themes/izmir/css/login-main.1.9.5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20372\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Jun 2026 12:55:39 GMT\r\netag: \"6a2c01cb-4f94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6d7543e168ebb21881775815aabb82116b06e157971efd92b3f0ebf8bd777a4da18fadb74ba3b707f9ada256b2cacabc2f; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1218\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: ff6b9ca2f50cc2920c016abb25016476\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000\r\nx-cache-status: Edge : HIT,\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20372,"size_decoded":21056,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20372, version 1.0","md5":"d741c07b12195f652ed16fd7a91e478a","sha1":"7de6599ca1aff94e7b3576b285619a7364b34042","sha256":"9c6e2b09ac19fe1395ca10c2872f9b132eb136faedb9bd7896779453497fec87","sha512":"d196e497c3c3f2e49a6688bf89819b899ea93fe214ea0805a1da7002e654c9b7d745b7ecba6686794501aaa76df3b1e66564b2757c470153dcec288df1a507a4","ssdeep":"384:rP3hmu8+TdRuyEECtjjQP753vv8D+f7hu+IprnfoOCmwqIA26TSEQ1SE1Sra:jYu/cxECtjjQ58rproewqSKu1S/a","tlshash":"7592e1eb4809ba654c037eb075c4e47fd102b6f099fa7ac102c37e483ea5328d9469d7","first_seen":"2023-08-19T23:54:58Z","last_seen":"2026-06-21T14:26:57.614549Z","times_seen":280,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris.php","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T08:15:54.760Z","timestamp":1781943354760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris.php HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5769\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Jun 2026 08:15:54 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PHP/7.3.33, PleskLin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":20114,"size_decoded":6181,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1969)","md5":"d531f50e0c97314a01552efcf56d4047","sha1":"5e3cc4bdb26febc802c62ddcdf7dbc9d1b1dd306","sha256":"e94c04498ff5d2192b4137003a29e7df3647a396e7fefffcfb62c9d71debc6a8","sha512":"9dfe749dea9b7cd1cd08ec1e08029b6450f9f2b75fd2f35103c346fdf62bb62be1110f59ad5c77ac9f274cd8e03d5bc1d967b0da7133fc41f6096fcd88619d18","ssdeep":"384:rlhY+mE/PINMhcp9HgAOozibgSd+Em3R+n4Fw:rlhYc8RHgACbP+Em3RJG","tlshash":"2192c77058fe1836d54b98986b75a33a6bb6c323cd0ad884b6ec57852fc0d858d8724c","first_seen":"2026-06-20T01:25:33.354274Z","last_seen":"2026-06-21T14:26:57.60335Z","times_seen":6,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":5,"connect":41,"send":0,"wait":44,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/common_messages_tr.1.9.5.js.indir","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.409Z","timestamp":1781943355409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris_files/common_messages_tr.1.9.5.js.indir HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\nlast-modified: Thu, 23 Apr 2026 13:37:39 GMT\r\netag: \"328-69ea20a3-e583cd086d53e398;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 20 Jun 2026 08:15:55 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":808,"size_decoded":843,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-06-22T07:57:46.237863Z","times_seen":37706,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/edk-giris.1.9.5.js.indir","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.417Z","timestamp":1781943355417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris_files/edk-giris.1.9.5.js.indir HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 17 Jun 2026 10:18:29 GMT\r\netag: \"1df4-6a327475-799b0975c93b925d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7668\r\ndate: Sat, 20 Jun 2026 08:15:55 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7668,"size_decoded":7936,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T09:29:48.149669Z","times_seen":16632516,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"toplukonuthemenbasvuru.live/giris_files/v67327c56f0bb4ef8b305cae61679db8f1769101564043","fqdn":"toplukonuthemenbasvuru.live","domain":"toplukonuthemenbasvuru.live","tld":"live"},"ip":{"addr":"102.220.160.18","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.419Z","timestamp":1781943355419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toplukonuthemenbasvuru.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 10:57:29 GMT","end":"Thu, 17 Sep 2026 10:57:28 GMT"},"fingerprint":{"sha1":"3A:24:85:B5:43:C8:8D:8B:12:9D:23:93:46:0B:C4:46:6A:8E:83:8C","sha256":"F3:49:BB:A2:49:F8:F3:A7:F9:F0:2C:1B:E0:37:67:50:48:E1:91:51:7B:61:8B:5F:E7:E4:00:2B:E4:1C:6C:24"}}},"request":{"raw":"GET /giris_files/v67327c56f0bb4ef8b305cae61679db8f1769101564043 HTTP/1.1\r\nHost: toplukonuthemenbasvuru.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/giris.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 17 Jun 2026 10:18:29 GMT\r\netag: \"75f8-6a327475-3ac64e1ed351eb2a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 30200\r\ndate: Sat, 20 Jun 2026 08:15:55 GMT\r\nserver: LiteSpeed\r\nx-powered-by: PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30200,"size_decoded":30429,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (30200), with no line terminators","md5":"9dc6464da80362edfde8cd10567de865","sha1":"6323d6fde4148ae6e8daa0bbc813814b7e7c8d88","sha256":"e7aa4e094a5dab2c40e1be1fbf91c58b7e26423e48e188a485a72994e8d050b0","sha512":"add716638ec1c9777be9c6c2173ce721c11a08def58ea916041aa5c21175498ecab9b74b29988419e3fb03289e2999463fd85b63f3211abc17cc90bf1ee94dca","ssdeep":"384:B4K61zI7CIyN4UletDDG0l/nvqtLxnzU50c74MNKJM4e6GODfPOsWN69O90:kN4UwDDlIUsJXvfP1090","tlshash":"29d208edb590b13613f7a47240bf210bb33b756264894418e22bd5c12c78aeed257fad","first_seen":"2026-01-22T17:09:23.016308Z","last_seen":"2026-06-21T01:56:51.066765Z","times_seen":5248,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"toplukonuthemenbasvuru.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - e-Devlet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with e-Devlet phishing","tags":["e-devlet","phishing","government","turkey"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.e-devlet.gov.tr/themes/izmir/images/login/edk-logo.png","fqdn":"cdn.e-devlet.gov.tr","domain":"e-devlet.gov.tr","tld":"gov.tr"},"ip":{"addr":"31.3.1.71","port":443,"asn":0,"as":"","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toplukonuthemenbasvuru.live/giris.php","date":"2026-06-20T08:15:55.427Z","timestamp":1781943355427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.e-devlet.gov.tr","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Mar 2026 16:26:01 GMT","end":"Sat, 10 Apr 2027 16:26:00 GMT"},"fingerprint":{"sha1":"CD:F6:26:83:92:3A:E5:19:C6:1C:FA:AE:58:1D:78:BC:4D:34:FB:D4","sha256":"AE:BF:3C:B1:61:4E:1E:C4:B8:19:62:9A:7D:CB:2E:E9:D4:F2:4B:E8:9C:B1:E7:03:15:57:08:DE:B3:90:24:B9"}}},"request":{"raw":"GET /themes/izmir/images/login/edk-logo.png HTTP/1.1\r\nHost: cdn.e-devlet.gov.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://toplukonuthemenbasvuru.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 08:16:11 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, User-Agent\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nset-cookie: TS01551c83=015c1cbb6db78dff074f07b54384b3643897ecde65c7839138b525c841f57ad7d332d8b7129bcf4f60d42135d48659b1f45d934fc8; Path=/; Domain=.static.turkiye.gov.tr; Secure; HttpOnly; ;SameSite=None\r\nx-mserver: 1218\r\netag: W/\"6a297c09-296c\"\r\nlast-modified: Wed, 10 Jun 2026 15:00:25 GMT\r\ncontent-encoding: gzip\r\nserver: MNCDN-1135\r\nx-edge-location: DE-688\r\nx-mnrequest-id: b0ae1c32d3399810ce39eea0f909b6f3\r\ncache-control: max-age=259200\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=7776000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache-status: Edge : HIT,\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42807,"size_decoded":42961,"mime_type":"image/png","magic":"PNG image data, 490 x 128, 8-bit/color RGBA, interlaced","md5":"cb7aa2035ace3489318c4f714710b03c","sha1":"2541409c618f714ba0df32820907bf531919a829","sha256":"49ed6c29a41fa9c083eb4a3ceb9c5a350c9ff1f6a7002627bdaa7a8337f6db1d","sha512":"f7519c9093c1008d6568765be0354ea9c2cd0694692b9faabe5be5fca092766ec4e165cb6db452037e3e48cab0eacbcad5e5737e3cdb2b4421557bc92c360908","ssdeep":"768:yrNaElgbZnMAeUkU5988rd3GSZqHrZvMHUbqsTEG5p40Lp5yN8W537p5PNqh6FSs:wMgohNZbP3XZWrZ0HdJU3TuF5PNjv","tlshash":"5b13f17f420e8ce13f882b03b8191b97bc6ad5361da514e9ec4bb29d28b0f3e5624570","first_seen":"2026-06-20T01:25:33.372827Z","last_seen":"2026-06-21T14:26:57.606044Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15658,"timings":{"blocked":15564,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}