{"report_id":"e9aa00cc-9048-4539-bbc2-90f29d3633e3","version":0,"status":"done","tags":[],"date":"2026-08-24T22:04:33Z","url":{"schema":"https","addr":"garantibankasi.intengo.com/","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":0,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"title":"Garanti Bankası E-Katalog Sistemi","dom":{"size":27921,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3214)","md5":"9008b6faded41b299dfbc29115265742","sha1":"562e71837672e3f4e8c0d57e66f3f337c6112cbc","sha256":"aba50fa0b542dc08bafaf87c7305db66b9580370de20824de85ec60ebc2c8eed","sha512":"7a76ee18b5742ab65bae751d1f1bb7eba626b53cc2653d9667c157d694777fdce7c8bf3c154e9097df9245d53c4b266c278dc88bb427fd1a72f651a43a0c84da","ssdeep":"384:hIdxzxHz2222gv+Ia5Fyxlf6dxh+WcBq2XDU3SKrAEBR9Igj:eLIIAf6dx0WcBq2XwTC2","tlshash":"08c2c410ce4d4c3e946365b4e6a1de8c18efd23ad3019d9876ff5033bad4ed4086679a","dom_hash":"domhashcdb310f2c4de95f83ea5ebfe22583202","first_seen":"2026-08-24T22:04:40.549391Z","last_seen":"2026-08-24T22:04:40.549391Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"garantibankasi.intengo.com/","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":0,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T22:04:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-23T23:16:58.176653Z","alert_count":0,"request_count":1,"received_data":94311,"sent_data":586,"comment":"","tags":null,"fingerprints":null},{"fqdn":"apis.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1075,"first_seen":"2013-05-06T20:20:21Z","last_seen":"2026-08-24T11:35:54.038962Z","alert_count":0,"request_count":2,"received_data":237431,"sent_data":1102,"comment":"","tags":null,"fingerprints":null},{"fqdn":"csp.withgoogle.com","ip":{"addr":"142.250.178.81","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4614,"first_seen":"2015-10-29T09:31:36Z","last_seen":"2026-08-24T09:58:13.102022Z","alert_count":0,"request_count":1,"received_data":1668,"sent_data":558,"comment":"","tags":null,"fingerprints":null},{"fqdn":"garantibankasi.intengo.com","ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"2005-05-25","domain_rank":0,"first_seen":"2026-08-24T22:04:35.907954Z","last_seen":"2026-08-24T22:04:35.907954Z","alert_count":196,"request_count":49,"received_data":1611964,"sent_data":29634,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.7.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-08-24T09:29:21.483507Z","alert_count":0,"request_count":2,"received_data":4956,"sent_data":1217,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dacace940985348c7e1f00e35409935","sha1":"41be83bd5b2011d1002eded659ae4ad81cc5fec9","sha256":"4124f5cfef220478e49ab559bf950abbda087577c53556ffefcd6d805b14b846","sha512":"4779d795dfb5fe341bb052293abbd7f245590af7aa2ea8d161a8f23a2e704b4451d43f19da5729b04151bf3ca0c2b4c824d93ca6f92c869e26380a5f23ef6715","ssdeep":"","tlshash":"0c9004d4c0c444515013054c53553114757517f5d0410370417105c3107c40751504f3","size":44,"data":"","first_seen":"2023-03-07T12:02:22Z","last_seen":"2026-08-24T22:04:40.613202Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1bba6de3ca0647fccf49517d632c595","sha1":"a6bafbefd6ed06f8171dacb09c98ee19ab263769","sha256":"49aa0ebd46e4ad026af32cf41f22bcd80a92b9d9c13faa2a8b38902f0e0a7494","sha512":"d08cba2e15a989662aea33ee71a12ab5c8d9e6fa30ef5f44d6a0161aef8e50cc6e1fcf3c0b5c011bbcc0389375dccd160489032829d339948aa718f167501acf","ssdeep":"","tlshash":"25a002864469199dc6150024b1f52f505835b1112cc26785eda5264a27549906589bdd","size":58,"data":"","first_seen":"2026-08-24T22:04:40.613951Z","last_seen":"2026-08-24T22:04:40.613951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c2a47ea2f3a0a7367ca992b72168e78","sha1":"8682d41a3eab7443c783db096680e9954faf63b8","sha256":"56bb078617a72eeb034c99078c1cfeccba5846165ff0db795c20a31aa4091e4d","sha512":"dfa79121a2b52739d58089f73ea22b6e7744462fcdbca4ad5ec2f758b1aa6cbbe18297165030fcb26706e9f6daf0251916c2810923889ad9e07fbfe5cab46a75","ssdeep":"","tlshash":"38f0e2d8a38c8085213b39b861bf52c9282e64b078457e2f3c3d99e07e942a80272919","size":461,"data":"","first_seen":"2026-08-24T22:04:40.615301Z","last_seen":"2026-08-24T22:04:40.615301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"350a8d1d2c557e4b888a8b3234408c6d","sha1":"07c987b4b1cd8a4fd14095d5f08ae43de2f5fda0","sha256":"8ac97836d235cc4ea2c371635d9b5983c715b26f422c0d63ae0315024f790a83","sha512":"d046cef18e776ba9427823a6fdf7b689fe79d0e881b85fb06863ff802b8899fcb91db7fe6de0894c32acfb86a3a5ffbd13788a4361e67f95c1623941dee88700","ssdeep":"","tlshash":"86d0920372cdb669684c40b38b481ce697f8d569628bef4c26ee49438da6e1cc4d022f","size":237,"data":"","first_seen":"2026-08-24T22:04:40.616427Z","last_seen":"2026-08-24T22:04:40.616427Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba90be1997d27f053494b4c42e1f1a06","sha1":"65c6c0f22892eb30449519b758c180b2f0799ed9","sha256":"7906d33dd9cdff008fe0f24e3799f04b2e3d07c36c8fc1fd0d06d9bbcadc2a7d","sha512":"c1f00d9cb4bb0fd9f355969577e5d6430b176db9ae09866dab686cf0c201d2efcd8cc84e618e23e1edc9f7755a78f23a8f7d7c028fc5974173d74914e1cd1368","ssdeep":"","tlshash":"c3e0b60075cea3463539e53d8a868caf907de5252541ef4f953c6c479e2bd68826012f","size":309,"data":"","first_seen":"2026-08-24T22:04:40.618047Z","last_seen":"2026-08-24T22:04:40.618047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a62034c25bbbf53112218883b4d79e3","sha1":"3f11f7424f1996f6f0193d62b8e814430cfa074d","sha256":"e0efbed07f551d72890ea62857307a4b3f2b10a5f12989246612b8f3d6650da0","sha512":"c6fa0e426d5c5d633fef50a3546f0b3b7c2f1cff3d50fd50f4b1ec841453eaff7190f59622e0672ae3a5ab105fb5bfaf999f9a2793dba9ae1e1efb75d10869d7","ssdeep":"","tlshash":"c101979bab5d20aa84b27a788c561488215e17b62c10cc5a3f1898b42d6413f97bbd5f","size":743,"data":"","first_seen":"2026-08-24T22:04:40.619522Z","last_seen":"2026-08-24T22:04:40.619522Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba865063215f314cf52042b79230c00f","sha1":"d3043317c367c5826ace3f9b0c8cbea1ad501ec0","sha256":"9b1de3ee4de7c6822f2ce918de8f299618a9a70176421953cc68dcd5b169036a","sha512":"99ad4c6aa892bc47cc408a8462728963b17da862f1dc17eff3108f4f3e8e1784919aa133ef5f5d423b1c41fce16b4819cc0ac8c04b8c616cc12789a9c8684a68","ssdeep":"","tlshash":"02d0928859e6efa222378e7c4846cc6f083ed03a284dc288a31d84845a2eab84241537","size":245,"data":"","first_seen":"2026-08-24T22:04:40.620877Z","last_seen":"2026-08-24T22:04:40.620877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d82e788f9947f068f93831af4264c36","sha1":"bf173b79afebe3e42c5066896813233b3319b498","sha256":"bc5f4fc4ee3476dbc85a32a50356a1b79f1363df507c13026de4c86b2a0a2505","sha512":"b62d0b35b11b4834b42e77783ba910cd5d77d27c864c2499db8280afd6f23910d69ba3b627a964762ef3991b1fbe46a75858e97d4ac769ce4c34e8d1937686ff","ssdeep":"","tlshash":"64d05eedf79c245810b61225683b11dcf82f57213e8b365de62ef9700c2c53d67a3898","size":259,"data":"","first_seen":"2026-08-24T22:04:40.622374Z","last_seen":"2026-08-24T22:04:40.622374Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"9813274f8449f3a4492e60f74efbea0f","sha1":"bcf5abbb41577e9793d57ed50ced4eb36c88c130","sha256":"9742bdc0d378dfa3bdc8378ffa9d4f82fc5d5175992d15e3f113afb6644cb1fa","sha512":"286672fd1be1dd4c57d17dec1a007ac0b2ccdf3d2294dfbfec3a19024c2fe42405e6eaeb762065022823ac8610711c92274fc5aafbc7e449aff0bb9f45a89e64","ssdeep":"","tlshash":"c7b0124a907884fef0b4187c9478bb29393403297bcd9911e0e3c1f512d054159b03ff","size":109,"data":"","first_seen":"2026-08-24T22:04:40.623473Z","last_seen":"2026-08-24T22:04:40.623473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f0cd84465e0712d955142bff9292987","sha1":"88fbbc227f106d900281f3e93efaca4e6bc4a666","sha256":"505f2d7f7ba28c1b1da93defb191776d38ed6e59bb4e47599fd3ecec291a6f82","sha512":"4077181225aac416c817e910cc151dd7176ec06e72d113a899bfece278a9d6ad01cd7725bdfd24e5fda8f3eb35258ae9e9bed9938cfb6bad0c6426420db21a4b","ssdeep":"","tlshash":"dbf055d685bc71fdcce8406a862c9646be3c0137822992b1f1684e2c3da807111dfa84","size":482,"data":"","first_seen":"2026-08-24T22:04:40.624851Z","last_seen":"2026-08-24T22:04:40.624851Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"27daf7f645222d166017625f33ef4af2","sha1":"890cb4e4822b4cf05904818280c8125f94c134f3","sha256":"3dcd384dcc0c6d0a6c1d04b7aa123e353e4fe63e0874704388aeec90314d96fe","sha512":"44db8c2a37ba4ab23a990fc7ef9309aa851c5de0f18d450dafec20fb105c91f6002be59315dc249b3884adc525992ed4f9cb6db1d4b62d6ff178a30fb173d12b","ssdeep":"","tlshash":"eac012269e582dfc105b10620b14e267e1e6c1ee29cc44881e138b321e1460252a06f7","size":187,"data":"","first_seen":"2026-08-24T22:04:40.635534Z","last_seen":"2026-08-24T22:04:40.635534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc8202752e7e322cc5c9123e8f6b976d","sha1":"c047e1359a1ae27a2e4ffb8744c773b307b25603","sha256":"0875d7f125486d77edf4b92fea26b6124421db16f2ec5d34ca8839feed910178","sha512":"4a887690ff7a94f5841f0767e555a34ffa7548df663f0132db3233824417bf9c7218cfefe8c85c91b8b78ec422d7bc0c34639efb0539ee7c341e2ed275576615","ssdeep":"","tlshash":"68c012364e68a9bc106b20161b44a262e1f6c19e298d05881a1393222e3590256a06a3","size":190,"data":"","first_seen":"2026-08-24T22:04:40.636846Z","last_seen":"2026-08-24T22:04:40.636846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"f99146c8051aca0cbcae46b3b75c8c99","sha1":"58248afe18c7ca54692d7f5589def132cc543641","sha256":"04e4a6f237fb5a5f3e44650e787e447bcabb320286f624700015fbf771e01b86","sha512":"0ef8525574a4296d3039f0350f1e3a418b54794804ad21167d9ddf44b67ff7eb924e357e1f8dd039f3b3acb1d641960b00f9cb4d26d28e1cf5f74ecaa9fe6676","ssdeep":"","tlshash":"53d0a71a9d9438bc04271112ab259261e5dbc0de6d8814803a6782236f1851111b05e7","size":218,"data":"","first_seen":"2026-08-24T22:04:40.637987Z","last_seen":"2026-08-24T22:04:40.637987Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c0d873d5f2466553ca7e888a477ac75","sha1":"8bdd575d7c835939af35163e35a2dee8acf81460","sha256":"7b28d187d15bed2e2f1533767afd00cd460a91928c35e0c787d881588be8f5ca","sha512":"c0e59ba42f757df7b9ebf6264fc5a32e119cf8cef359e6eb6a83a7a598b7e7eaabc9d925250e502d6301e5216e3a0fed0f6239da2fc2d85f919ef7f27260bd41","ssdeep":"","tlshash":"ced0a71e9e943cb8146711119a25d261e1dbd1dd6d8814901e6752236f1444151756e7","size":220,"data":"","first_seen":"2026-08-24T22:04:40.639288Z","last_seen":"2026-08-24T22:04:40.639288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eval","is_inline":false,"md5":"67957503aab96a98ed93e473aee01011","sha1":"c710877e1676dbcf0150168251de16518db5407d","sha256":"a047f69e6cc296d63bfd011e487f890054af031c957a32a7a26f2f689eaf250d","sha512":"10e60ddae9ec3df7658e376667a4296eb503d3ea7690a4a123ffcb100422b5c7c5dff52fc9db046e45bd3ca9c7e37525463ab5117f69439855cccfe7f0f8ab9b","ssdeep":"","tlshash":"43d023cd26a0306cd74101812d59d54775291935700c14c8954693c156e74754553d2f","size":207,"data":"","first_seen":"2026-08-24T22:04:40.640213Z","last_seen":"2026-08-24T22:04:40.640213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Final/org/richfaces/ui.pack.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"20402f18509b06391f6dfa69ef817abc","sha1":"36da3ad394039bfa90fce4e1ae918344d922e37d","sha256":"9cb22b5c1ba5cec98a18f43523a19781b5ec23a8ec2d8359e01325238132e4ed","sha512":"f2c19b1287182adbba04218513f400077a621416dee4440b412d80fcf3cf532522c85f770dbcdbebd0f157a862af59748330a0460206393e2457657f22afaae4","ssdeep":"12288:4NceRcTBxMcjWoW0qBGLXFXBd4G4+ITWDpcdske3285abU8MFmDlSjYnR:4NceRcTBxMcjWed4GRIKDpcdU5cU8MF6","tlshash":"65e408583a892a3a01ff11b521af678efe76a4819444803cb87decd99974d5b007fe3d","size":677345,"data":"","first_seen":"2025-09-23T23:27:29.253186Z","last_seen":"2026-08-24T22:04:40.579713Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eval","is_inline":false,"md5":"d4668bf02e3bfc08a6a86a3c4961e6df","sha1":"73a6f4f56222ecc8696d43555b6f74788d42ffcb","sha256":"f95f1d8ac45ab5d15ad45808a310837470b4806abbe7bb9801eae4c0ef63f6dc","sha512":"59c562f5480144d39c62929966127c978afe50e654a1a246e1c01fb92acb747d2c3fe71a7490c36110360aafff4351a32eba8e74b1509c2b7ec5d77e13885b21","ssdeep":"","tlshash":"4350000003000030000c0300f00cc00000000000000c0003c300000c0c00003030c000","size":8,"data":"","first_seen":"2023-03-13T07:24:07Z","last_seen":"2026-08-24T22:04:40.641182Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"15996e89d533296c885b550700cff626","sha1":"51d4e6c01893b1d03b284970ff54e30d84ab83c5","sha256":"0b722b1f1d8d899e7f4707632011a32597b230e3824f63ea6a44366b24cfd746","sha512":"fe6f8806c35e61f82b3387f00a8e5c2d98b8fd428f7fdb899b2f28478a4a8b828a66e43dcaa79187cbab2c930371e4911db748df14fc70e53e755bf049d0c3eb","ssdeep":"","tlshash":"768000803c038aca002c03082322a20a223203022b82b2c0a0a03220fac22cb3802c80","size":29,"data":"","first_seen":"2026-08-24T22:04:40.641703Z","last_seen":"2026-08-24T22:04:40.641703Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/library.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"17d70298de31da046dda98c00ccea088","sha1":"10c73cad3008b654d07c50ef5b759868f2893ac3","sha256":"b0f1de98b5d1922419cbfee4f16f1129df3548add598c77bc61dfd8e2edfdb51","sha512":"8b2e058abcb59d55d67300753c671610d3ed2a1e482a8423f8130089f048e67bb693eb69e04a65dce97163068bf15734e3046ab7d6c188733245dfdca15fab61","ssdeep":"384:KBR6ZqHCzkDY74zHpfqiKu/iFuSvuUACU2uy57:EwYDY7AvPiESvu3P2p57","tlshash":"9ea2435993c530d97abc33b2942e8318197902bbd016e04be869909d5f37dcad0e3e7a","size":22714,"data":"","first_seen":"2026-08-24T22:04:40.558652Z","last_seen":"2026-08-24T22:04:40.611911Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/jquery.countdown.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b907117d4c755ec9c3f08de78677a22","sha1":"18b9159583543aadbbf84eea64cf31defcc28507","sha256":"021fe0b73e612311675ee600f809ea1e316610a0367f3dd837116267a62c01cd","sha512":"d12d9381e4a1a45bd6b2ccbdc3cc38e5155f9eab1b77e3cf778d6709278df1643cfb8541b1e07682fee56418f339a84f924704e0cf0fd3e71bfef561abeac65e","ssdeep":"384:QbrXvqV2NdLmRXp7gxfHTUcDyaYSgGBnz+iESERF9O:yrfPdwIfQcDyaYSgGlz+xSEdO","tlshash":"1462c64523a01381ad5f92760d3f630619324b558d02bb34ad6fcacd6f28ac7a62b6f4","size":15045,"data":"","first_seen":"2026-08-24T22:04:40.560291Z","last_seen":"2026-08-24T22:04:40.573609Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fgarantibankasi.intengo.com\u0026rpcToken=437109916.914139\u0026clearCache=1\u0026supportBlocked3PCookies=1","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"671ffb739b15d1f76fe0bfda3211d6a4","sha1":"cdd0e50d2d0ab5e871821f1e5b1245343edf17bf","sha256":"1efcb4c5cb4522989514356d42b18a77598da23e50a212d4f74d084ff80b8c33","sha512":"506d7b2aa04915c0013520f78a79ca9bdb0a02d6f2099c4aa61fa0bf5289c70a3ac0231c5a690e8e5f7af1919ffe765a8d6817f2c940861e56a4256bd4a1a454","ssdeep":"","tlshash":"6e8000cac0820232a820200ba80002823aaa0a00f08000ba88b0c00c203c808023abaf","size":31,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-08-24T22:04:40.643072Z","times_seen":4127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/js/platform.js","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f08bd3402f78f38ace991145a64e09ce","sha1":"1991f34e3514da45a7b16b96e4620ea260241a93","sha256":"f0cd0303adfd9144a394a3d0d307a7529f4b69fedd3ac61b69a536dda6b549ff","sha512":"b7b48ab1c2e02e50976751a031316ffaeb4a0b9c560c66b9926d9efb7af889ae78618c7dbb1ae921ddcf28ef8609dd7dda9f44ff171a81c4fac3bbeafa09798b","ssdeep":"1536:0DGSJRzsqdJ0mzAyPIxG531y/fN6M6GZBJZL:2RzjVIU5A63GJ9","tlshash":"1b53dad976a5702283a3b5a5103f010ef17f6da9fc4c98a8b199c4e42d78e89017bf7d","size":64840,"data":"","first_seen":"2026-08-13T01:13:56.473185Z","last_seen":"2026-08-24T23:53:37.645723Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.zhTT8Br0Ho8.O/m=signin2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-7LeULGjNQZRvhdu3G71akb6JY6A/cb=gapi.loaded_0?le=scs,fedcm_migration_mod","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffd01a21134217432f7b62ab578deb92","sha1":"596450fc5d289fd36d96c24242f4673d5993c6ba","sha256":"dc1cfef892cc862a2aec49812e268765a2beb50fee5f8fc2b0c6370c9dc8ed80","sha512":"c0507c7dc4a525700f1ca2d335ff23de640ddd864055cc5207f8e8c35ac6948aa7f56f19bdba8da5db3e02208b54e1df65d0114549304ba50e6da9b669906452","ssdeep":"1536:LwYm6iE13eyv2rcytXFBRbyF57QrAJM/09KVOyQvHLUDhKKhxvoxudJyizZ6NIIP:zsyvR5k09KVqLi/3vo0JnzoGJqZX","tlshash":"04f3b7d9b6a270668363f4a4503f010eb27fa8a9f44c5cacb288d4e16df5949417bf3d","size":170817,"data":"","first_seen":"2026-08-23T14:08:03.768334Z","last_seen":"2026-08-24T22:04:40.601325Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a4916939e64997726d9a9963f072f05","sha1":"ac57301970475e2c8eb65878e8e92191ab2e0fc8","sha256":"8180db4cd21b00a4282a3eb6e0749430e6aeffb21877376cd404835d2885253c","sha512":"2c81f40d510786f781b1ee881acf6aa3a9d969e52e50c01ca7e69957242b8a3d405a3596a837ea53313dfd8aadd9711af4f6dedee959c786e7dba622fe42dfc2","ssdeep":"","tlshash":"8a8000c03c0288c220282300a322b20a20b223022f82b2c2bae0320038c228b2820882","size":29,"data":"","first_seen":"2026-08-24T22:04:40.643621Z","last_seen":"2026-08-24T22:04:40.643621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljquery.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5c60cde8c6e2f470a411af1a7d29865","sha1":"569ab1fdd52a5de3686bf00a5b7adc2fc75d9596","sha256":"217ad0498376f19a09644d51d1db4d231e1a03d68370223043a7d7304b5077a6","sha512":"e70949ac42da7efdd71f615d9bc5478393492d08c1e701b5bbda8a5460ef66582d3357aa3cf2e5e50db982e74fd6ce618366a1be074f571c73b7db07242c3486","ssdeep":"1536:NLYk5QZbvcRiWFo1k8Jc/e6ynWga01ITRqeI1BogSgrcCQRaHC5QZX:dx+Ubyq1Kr1ICQRaHC5QV","tlshash":"ac73d89c7689603e82fb21bbb83f575d713696a6590c8041f16c9ce47eb8d41806bfbc","size":76617,"data":"","first_seen":"2023-03-08T07:44:04Z","last_seen":"2026-08-24T22:04:40.599494Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/jquery-ui-1.7.2.custom.min.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e78a4e85b0f3f771dcaa40857a582ab9","sha1":"b11e2bf3b9d3d8a0d98187f7ffaab6e86f0c5ef6","sha256":"b3de39b0c7e4e28608bad329a2014a24311bfb3f0a0b76b6267238c22b350713","sha512":"4a73b6fabdbfaa620c6acf28725cbbf63263ac945cb1adfa00ab5932f19e2389b0b35944fcd2ef8ac1e94e6ce145ba7e43abb3a7ef1117e3d50172c3bb42bd8d","ssdeep":"3072:0T6DcBb96aoapumbIJIvHIGW+/Rde0QacU:02oBb9dr1bIJIQGW+/X0U","tlshash":"6f04074d7205363a89efe279106f1b0a623291599701c15cf43cc9deaabde4421bffb9","size":185972,"data":"","first_seen":"2026-08-24T22:04:40.570121Z","last_seen":"2026-08-24T22:04:40.600189Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finalorg/richfaces/renderkit/html/scripts/jquery.hotkeys.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"40313ca74b48df441e442a59e5cb06c0","sha1":"bce4c771e757e98149864b6c85e161a5c020f01e","sha256":"7f4df5ee3657bf848d67537313debe9804ebc3c260e685e02c18bc3564cfc706","sha512":"3fa52d28eccde82cb9040d9bed7a5b3ec68a54ea8b9a9f810630c222a199bad43b1294da3bdcd256715a53cda48227e22942a098df71d584a9e9002af4b9488e","ssdeep":"96:psSbUNbMVny+a/e9/uSyAmDyHrmDyRXo4hremugK2p:8L+a/yOAnLnpvhremugKs","tlshash":"bb81534ab78a658814fbd53fe6f7cb2af53c4acc04f75418a9954ce805389403702bfa","size":4190,"data":"","first_seen":"2025-11-11T18:58:13.463304Z","last_seen":"2026-08-24T22:04:40.610734Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eval","is_inline":false,"md5":"b83d5efb8b53a102a9c33972ee2238cf","sha1":"c6d769d1ee2c50ccb022dea66dabbaaac76dfe65","sha256":"bdb71de6bc3b5616eee1d046404d11eed8ddb238d48fbee7ef39f9d1820c69c6","sha512":"2c23006ed0f2827c0f88bddee26bfab4b26ab2c1eea18a006148bc602afe363cc85b358ba5388f657d88ce943a3c7b35a2dc1ba26b2860f6d49130fc9b6a78de","ssdeep":"","tlshash":"f6c0c08830897c8c6981c2ac16e19c0b603d4830b00c04049c41ffd151ef8301903e78","size":189,"data":"","first_seen":"2026-08-24T22:04:40.644595Z","last_seen":"2026-08-24T22:04:40.644595Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/formbuilder_library.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4ce11a653c20ce784c4e641eb3554b8","sha1":"23664114c57caa1c58f05ab8145e8c75f0f90bd4","sha256":"524fbd074ddee587bfb2f6757cc0bd3d6d23d6d251cbd98be42210449f7d2815","sha512":"17db7294b6738a15270cad2e42452122f89e24544390f76956a9afac4567eaa53be910b77d1dea97c948236015fb314b11811b264adb219b17bc6b6a3d70d3c5","ssdeep":"","tlshash":"d251408a7a1870b980ef3079a47b0ffe763b824dd5284140943285d024b5f95da2fb6e","size":3012,"data":"","first_seen":"2026-08-24T22:04:40.5821Z","last_seen":"2026-08-24T22:04:40.586486Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/javascript/pikachoose.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"55430fdbe17891bfd8faf57532496940","sha1":"f05419899ad751d37b959bd6e57623dc7ecb082d","sha256":"f75f65188e3b0a185dd4ba3540bf78affc87503f7e9c700c501e9087f015d9fd","sha512":"94ca3d2c8e8eb0acf9d0651822974e41fdfe01c0db18654e4d4a7e46286f76dfe7972c08b9c4da9f7a14cf97cd7b951e16539d6d9b09b61726796bf894148d07","ssdeep":"96:tN26crgMuPZNVhjkOBDiyzX/jL+mJOIBQC0moDQtGoCUUQ4xnYrp2ydV6zYaW2Le:t7dvAaaSBooChxnep2y+86noAEL","tlshash":"41227399e70c62ffd0f310a6b73f01e9787ec2311405a75a3f1ee65c19a094582bb9b8","size":10602,"data":"","first_seen":"2026-08-24T22:04:40.574785Z","last_seen":"2026-08-24T22:04:40.612579Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Final/org/ajax4jsf/framework.pack.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fe0a5d98d1fe132cf856365c5740a08","sha1":"73479199fbc0cf28c62949a1f744bc72f9dbd047","sha256":"5c5da749f266c59a8bb7bef2c3eb4001fc410c54aae1ec882974586bdd19fad2","sha512":"15ae9b8ea39dd32edad9c2b963c2d146dfd4fa640de64003f1d014f9ac235067c6ec0249ce132460d2db942302cea3ec3f76ba06ee9fce4ecf646d2cc30e7070","ssdeep":"6144:qEUgbw9fs2mn8SJaOraoRgU3Er4wx+vlDXMgpDs1/UvX5tOOeDQ:6gbwzuLaoRgU3E9aDs1/UvX5tOOeDQ","tlshash":"ed64078872867a7606ff6178206f278eba7694906548c06cf07ddcd5acb4e1a403bf7d","size":319163,"data":"","first_seen":"2025-09-23T23:27:29.260784Z","last_seen":"2026-08-24T22:04:40.608715Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/jquery.countdown-tr.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b97d5269bf1f381dcf10bfc6de1f893","sha1":"19389d86618b2dc932f1cb81115b9cb225cec8f5","sha256":"1f0c65747488cac6c8763390ad997b154a398b20396ff43be10e3ab5e361f228","sha512":"831df547574bf82ef3b8e2cb3ad4463546daa4fd0f286f3ba1d12503a817bae69a857f9e621898414285e16d0bf058f50160f822bf634b6eb243e72478f98301","ssdeep":"","tlshash":"cfe0c2d882a6c1775e55f867b561cfaf2cb60e0ad1c0ff62928b1c8c61320a9452bc53","size":295,"data":"","first_seen":"2026-08-24T22:04:40.58387Z","last_seen":"2026-08-24T22:04:40.590191Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eval","is_inline":false,"md5":"00055f7190eda8dde9cb8a3462c3d427","sha1":"ec4d488fe1684de1ae417db0044b9b88c47e41d5","sha256":"c9535e122ab076a22f9ff39a18903a57c1e4e234e0d110c026a62e12e76a81d6","sha512":"ee804d22d90beb94fd1020e031b6a9156167072d481fc9522c8c8c84037c551e348c80dace9388013596625be2d80a62fd322f56bde879ce7283406d5dfca347","ssdeep":"3072:gGrqk54w3TFvEZEtXUht0BlUchUfU/XUlz8wMmejKfkSo:gmqk54wZXUYBlUchUfU/XUB3ejKfkSo","tlshash":"49e3f94db03362be8df730b6f4731f3d7272cf48464544a9e52094a569b8e66027beb8","size":143702,"data":"","first_seen":"2023-03-08T05:42:14Z","last_seen":"2026-08-24T22:04:40.645511Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdpIFrameHttp.en_US.Xix2UhUizvE.2018.O/am=BECAAQ/d=1/rs=AOaEmlFiGMmyuK6UT0QFyK8IRuNoUPK3ng/m=base","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b8bbd2a6fb817b9201624bc2c92593e","sha1":"e2db62feaea8f2bf2737e372a6279e225222400f","sha256":"8cc8386c6ff1fa7d8831273abbce870f326f81f88c5a1895020350c0e20ea94b","sha512":"a10c10576fda1ec60cf57e49d2e6145971201038079593ce4da64b91f678c6d15ec239e5fa3769b29c421d233995f930b768ddefb8bf75f208d5770e60d6a613","ssdeep":"768:hJJXilb3jvvP4lIk0Yc4Cgb8ajVh3ULgKAqpgXUJKZ5dRTBTYepjlwNab89tt:5Xi13LlYnjVwgKLpgXUJKtDTvpbS","tlshash":"d593f78d73a1b07282a2f5e6802f010bb17aac56f85c9cacb195d5e15eb4e45427ff3c","size":93344,"data":"","first_seen":"2026-08-22T17:55:28.930893Z","last_seen":"2026-08-24T22:04:40.586073Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"domTimer","is_inline":false,"md5":"e729aa94691fc1e104dc0c65ac0d077d","sha1":"3c7ff6b1bb9d4f4e23ed8f8b536b94ba10423692","sha256":"f3c4d50a82856972f6cf8f972ed6546c75f66fe117b7981299047de99316a4dd","sha512":"c0c34f2901d26303a7ba4d481d4af86040d7265c178808d7a67166f12224b5b66483c5d1224ed834e228777f9d359d94429bd1d9016289ac9dbf752b43ad6c20","ssdeep":"","tlshash":"a8b00285c455189c81150034b0f42e1068155005ec926545d558215627609505589b59","size":121,"data":"","first_seen":"2026-08-24T22:04:40.61589Z","last_seen":"2026-08-24T22:04:40.646045Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/jqcontextmenu.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"30f7520ec600f22c4e0c9c3c33388d49","sha1":"c1806759b5bcdb7c87fdc26570a76573f127a5a4","sha256":"7b84bb881f0b179def1c91e2cd42973b2d75e2141e504b38437ce97378ee2427","sha512":"8322c76703e10ba96db20a56951e1d6aceed4839ebc63282ef0a2d4e7f8c76c5cde34f3ca745874607757d12451694821c80f3d7be29d62632cb805f77a04fd4","ssdeep":"","tlshash":"4b510174394123b9327f6222c87ea70ba3b5a56cfb01c039592d525c1fd654e7ae3f09","size":2921,"data":"","first_seen":"2026-08-24T22:04:40.55701Z","last_seen":"2026-08-24T22:04:40.569562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/javascript/jquery.ie6blocker.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"944b98c3ad8e9193d27cedc3cfe10acc","sha1":"ae62641bf32885a45d9d752c83a3c0d3a6987062","sha256":"bead54d1a08b7eb2f3676801931dc57e828cb7f52ac48e075cd355870755afa7","sha512":"4f604dcb94b54c5bca0b97f808681dd1d3548bd7d0a055126df0c343eb329aa4c023d91bb4e825ff3496cec85af91c3133c92050c59233436d83c2fb1b51efc0","ssdeep":"","tlshash":"e541f18a52cd605ca910edccf979eba9d50f05b0e58180d8f4e94fb5f682542e1383df","size":2329,"data":"","first_seen":"2026-08-24T22:04:40.558166Z","last_seen":"2026-08-24T22:04:40.605505Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eval","is_inline":false,"md5":"f1988b4d295688e0df75e75d7c4bb37d","sha1":"c4872dd9c6b2d56f4c9b02cdddd11a450cef70cf","sha256":"82d444eb2ffa886ef75db91da1c8a0a3ee72561e07403465c4ab7c36e1c028e6","sha512":"039ab2381ba48951fe9b1b77585dd44d54526211478b58d5ed7d5fb18f7b0ee3668792232b617c6b08a5e77d097bef98210c88bd78f53cc9917b29a4b5d99ec3","ssdeep":"","tlshash":"ddc02bcd55d83058868141823cb9c44d643b7434200c0d55b58bb78211fec704543d3c","size":142,"data":"","first_seen":"2026-08-24T22:04:40.646652Z","last_seen":"2026-08-24T22:04:40.646652Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eval","is_inline":false,"md5":"51e141f1ce1e572dc636652f29a08ad1","sha1":"3e2018467e1ed98fc5c7daebcd286cb79ba2ae9a","sha256":"fea887add3b3b6c82e0ad31f31d107a60bfd7e99438630423560f134085aac2f","sha512":"731bc63f38771842d85b11b3c209deef3e99130f6445b0a5f09ff3f0cbacc82b18b45e83a7be8c5406bd2340260bb2b4979c556279545f588f3f0cb7623cdc35","ssdeep":"","tlshash":"46d0c0c4be9a3070431285a93cd08845d53a2838b40c4c4c69cf63c00685831ea87e3c","size":198,"data":"","first_seen":"2026-08-24T22:04:40.647719Z","last_seen":"2026-08-24T22:04:40.647719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/interface.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee05191114ae3c4446a6443aac1eb22c","sha1":"7802a5d0bcccac72757ebc8ae49634ec5bd6610d","sha256":"823ec24186ccdf6b1cd2e515683c5a0bdf9aeb48f0e736c293351de24233fa55","sha512":"6281d4997cc4d16a0592e982385cfa739b5256fd0328a9d2bd284c1d729c22e692ce516fca77397dec46b34a5ca3e66069a39700f0dabe6438277a0c43d478d9","ssdeep":"1536:rHDyGqpuE7JfgbwmNBOGlHD4IwLyvvyAML3pRWKJH1ay82uWu:rBq3GFcL3zpa5dWu","tlshash":"94731a2e691301b60fe4f7b46d0f5e096bd141de8af94465e1a9f0db14f0022a9d2afe","size":79189,"data":"","first_seen":"2026-08-24T22:04:40.574417Z","last_seen":"2026-08-24T22:04:40.596928Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Your client application uses libraries for user authentication or authorization that are deprecated. See the [Migration Guide](https://developers.google.com/identity/gsi/web/guides/gis-migration) for more information.","filename":"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.zhTT8Br0Ho8.O/m=signin2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-7LeULGjNQZRvhdu3G71akb6JY6A/cb=gapi.loaded_0?le=scs,fedcm_migration_mod","line_number":170,"column_number":325}]},"http":[{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finalimages/spacer.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.069Z","timestamp":1787609043069,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finalimages/spacer.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":334,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-08-24T23:49:38.206767Z","times_seen":112471,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/bl.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.405Z","timestamp":1787609043405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/bl.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 119\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"119-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119,"size_decoded":370,"mime_type":"image/gif","magic":"GIF image data, version 89a, 10 x 10","md5":"a8ef6fef6eabd92fe327217ee4d656bd","sha1":"f1ebe16ce37bd35b7bca0853d0406a603663121b","sha256":"cc17ce28c36dea715ec8a92c0e8282f886c87655a616190f36f003b8069ae140","sha512":"d791e32c5bb0ecf4510ab4cc67e340e237f0d583435d37d0875ee1eb09adec31a91adbcd8056301504b4e4204ca2588b0168c0301c49a66f2770f35408750009","ssdeep":"","tlshash":"7cb09bf0cdf142469c766cb185d519c6176115d7191e0580c541317515a61341416554","first_seen":"2026-08-24T22:04:40.553056Z","last_seen":"2026-08-24T22:04:40.572216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/o/oauth2/iframerpc?action=checkOrigin\u0026origin=https%3A%2F%2Fgarantibankasi.intengo.com\u0026client_id=83632425116-1gt7mtgagmibdfef90rbbsk27pchlcph.apps.googleusercontent.com","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fgarantibankasi.intengo.com\u0026rpcToken=437109916.914139\u0026clearCache=1\u0026supportBlocked3PCookies=1","date":"2026-08-24T22:04:04.134Z","timestamp":1787609044134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"GET /o/oauth2/iframerpc?action=checkOrigin\u0026origin=https%3A%2F%2Fgarantibankasi.intengo.com\u0026client_id=83632425116-1gt7mtgagmibdfef90rbbsk27pchlcph.apps.googleusercontent.com HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XmlHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.google.com/o/oauth2/iframe\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Origin\r\nx-content-type-options: nosniff\r\nexpires: Mon, 24 Aug 2026 22:04:04 GMT\r\ndate: Mon, 24 Aug 2026 22:04:04 GMT\r\ncache-control: private, max-age=3600\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp, script-src 'nonce-prSBc1HQN3CVxjWIHhtOnA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp/allowlist\r\ncross-origin-resource-policy: same-site\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data:;report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp/fine-allowlist\r\nreporting-endpoints: default=\"/_/IdpIFrameHttp/web-reports?context=eJzj8tDikmJw0JBiaL15jnUyEJcsOs_aBMRdQDwDiA0VLrHaA3GRxBXWBiD-VHWDVaD6Buu3Yl82lhJfNtOQQDZnIBbi5rjyf9MVNoEH68_7KKkl5RfGZ6ak5pVkllTq5ieWlmToZpSUFMQbGRiZGVgYWuoZmMcXGAAAzG8uFg\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: NID=534=m7dJNmHbiK76kbYi04BIqCB3KGwVlF1UaaGpzkQk9fZo0WArvNLYK6j6xQfUr3wXnnKJJ4FueruioxP_jb94CD9lcnIdTZvF4T2ScJh0gnvEWf0Q2J00-P8XqH3tptcp55xIpvpcyyJWOKqeaivSielyIWTk5sD4qzlOZ87La4thu5ajS6NEyn8-qmCMDzBYtrQ1AKxIwi03KS06p9oPjq-SZpV8t3Sn1RxS9AVAorZK; expires=Tue, 23-Feb-2027 22:04:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"534=m7dJNmHbiK76kbYi04BIqCB3KGwVlF1UaaGpzkQk9fZo0WArvNLYK6j6xQfUr3wXnnKJJ4FueruioxP_jb94CD9lcnIdTZvF4T2ScJh0gnvEWf0Q2J00-P8XqH3tptcp55xIpvpcyyJWOKqeaivSielyIWTk5sD4qzlOZ87La4thu5ajS6NEyn8-qmCMDzBYtrQ1AKxIwi03KS06p9oPjq-SZpV8t3Sn1RxS9AVAorZK","quoted":false,"path":"/","domain":".google.com","expires":"2027-02-23T22:04:04Z","raw_expires":"Tue, 23-Feb-2027 22:04:04 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"NID=534=m7dJNmHbiK76kbYi04BIqCB3KGwVlF1UaaGpzkQk9fZo0WArvNLYK6j6xQfUr3wXnnKJJ4FueruioxP_jb94CD9lcnIdTZvF4T2ScJh0gnvEWf0Q2J00-P8XqH3tptcp55xIpvpcyyJWOKqeaivSielyIWTk5sD4qzlOZ87La4thu5ajS6NEyn8-qmCMDzBYtrQ1AKxIwi03KS06p9oPjq-SZpV8t3Sn1RxS9AVAorZK; expires=Tue, 23-Feb-2027 22:04:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49,"size_decoded":2444,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8b5fe24381261e2b3e9986632a95bda5","sha1":"026df66336511618b5d123b206a2398d03c6a457","sha256":"4836b6031bc4af96767f0121fa458714583340054aea6338ef99a1bc4011f43b","sha512":"7844d8522afbed8e645de30b5556a03ffb099aac6f45ff0f469ec91a15382c6339a0a5b536599e04f90a119c2bfe11f8a224e2b46c89d6690375e26c3bc1f12f","ssdeep":"","tlshash":"6090041f137014dd75501041455417571d550d33700470ccd15c414c35df5c75571407","first_seen":"2023-04-05T13:58:51Z","last_seen":"2026-08-24T22:04:40.573931Z","times_seen":2562,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Final/org/richfaces/ui.pack.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.812Z","timestamp":1787609042812,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Final/org/richfaces/ui.pack.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":677345,"size_decoded":170931,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"20402f18509b06391f6dfa69ef817abc","sha1":"36da3ad394039bfa90fce4e1ae918344d922e37d","sha256":"9cb22b5c1ba5cec98a18f43523a19781b5ec23a8ec2d8359e01325238132e4ed","sha512":"f2c19b1287182adbba04218513f400077a621416dee4440b412d80fcf3cf532522c85f770dbcdbebd0f157a862af59748330a0460206393e2457657f22afaae4","ssdeep":"12288:4NceRcTBxMcjWoW0qBGLXFXBd4G4+ITWDpcdske3285abU8MFmDlSjYnR:4NceRcTBxMcjWed4GRIKDpcdU5cU8MF6","tlshash":"65e408583a892a3a01ff11b521af678efe76a4819444803cb87decd99974d5b007fe3d","first_seen":"2025-09-23T23:27:29.253186Z","last_seen":"2026-08-24T22:04:40.579713Z","times_seen":6,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":65,"send":0,"wait":127,"receive":137,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/jqcontextmenu.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.832Z","timestamp":1787609042832,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finaljavascript/jqcontextmenu.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2921,"size_decoded":1351,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"30f7520ec600f22c4e0c9c3c33388d49","sha1":"c1806759b5bcdb7c87fdc26570a76573f127a5a4","sha256":"7b84bb881f0b179def1c91e2cd42973b2d75e2141e504b38437ce97378ee2427","sha512":"8322c76703e10ba96db20a56951e1d6aceed4839ebc63282ef0a2d4e7f8c76c5cde34f3ca745874607757d12451694821c80f3d7be29d62632cb805f77a04fd4","ssdeep":"","tlshash":"4b510174394123b9327f6222c87ea70ba3b5a56cfb01c039592d525c1fd654e7ae3f09","first_seen":"2026-08-24T22:04:40.55701Z","last_seen":"2026-08-24T22:04:40.569562Z","times_seen":2,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/javascript/jquery.ie6blocker.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.052Z","timestamp":1787609043052,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /javascript/jquery.ie6blocker.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"2329-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2329,"size_decoded":1243,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"944b98c3ad8e9193d27cedc3cfe10acc","sha1":"ae62641bf32885a45d9d752c83a3c0d3a6987062","sha256":"bead54d1a08b7eb2f3676801931dc57e828cb7f52ac48e075cd355870755afa7","sha512":"4f604dcb94b54c5bca0b97f808681dd1d3548bd7d0a055126df0c343eb329aa4c023d91bb4e825ff3496cec85af91c3133c92050c59233436d83c2fb1b51efc0","ssdeep":"","tlshash":"e541f18a52cd605ca910edccf979eba9d50f05b0e58180d8f4e94fb5f682542e1383df","first_seen":"2026-08-24T22:04:40.558166Z","last_seen":"2026-08-24T22:04:40.605505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.Finalorg/richfaces/renderkit/html/css/extended_both.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.303Z","timestamp":1787609043303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.Finalorg/richfaces/renderkit/html/css/extended_both.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6942,"size_decoded":1215,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (6942), with no line terminators","md5":"8c7db8e2227f5d62e26f6a54f47c0693","sha1":"f2db15ca5c08946556f9d7d186f2f3da90c0b46f","sha256":"5db7c1180c60d37a784d8bddc783555f1b2ddb870b0070e364497dcbb44feb29","sha512":"3416c8eb2264e2a2c562fb8e3017481d2e9114ffc8137fe14ca23fec9a000ee33f4ca7d6806fa77e806cfa9f33767396831ac91e42ee0e8205b9051feaf5c4bb","ssdeep":"96:Xxs6/96PS5VS2RS+5+usRG6O45+K6OqV5ASeeD666tSvSwRSLF5/mTORG6OhF5/t:BsiVCOSSoGiIDZjKkSSWGiY","tlshash":"ffe1c0505d0d226676a3582c61b7db022b0a8263e8b9af3c7561b0b5f1df493193fb73","first_seen":"2026-08-24T22:04:40.559239Z","last_seen":"2026-08-24T22:04:40.566441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.FinalMETA-INF/skins/darkXExt.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.416Z","timestamp":1787609043416,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.FinalMETA-INF/skins/darkXExt.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ncontent-length: 1737\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1737,"size_decoded":2048,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (1737), with no line terminators","md5":"d1328ab50a786c6b877f48e966528505","sha1":"55f765061bf8935d3186d306b0b3467f3dfcfca1","sha256":"95927897c406efa6d6b72914374a7522024a1bd5e7584dc9a3018426fe88d28d","sha512":"897129c4c33ce93c8957924bdbdaacb61e4a47db6c512ea40898a71aad20bde5d186d15813b8d7c91741a24b81293f987b177e313fa0d4f60d270bba6cb608cd","ssdeep":"","tlshash":"7431d335850d329a7ea3697af5c6670a080b8512d8e5677889d630fe74d6223043dbed","first_seen":"2026-08-24T22:04:40.560616Z","last_seen":"2026-08-24T22:04:40.573063Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdpIFrameHttp.en_US.Xix2UhUizvE.2018.O/am=BECAAQ/d=1/rs=AOaEmlFiGMmyuK6UT0QFyK8IRuNoUPK3ng/m=base","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fgarantibankasi.intengo.com\u0026rpcToken=437109916.914139\u0026clearCache=1\u0026supportBlocked3PCookies=1","date":"2026-08-24T22:04:03.986Z","timestamp":1787609043986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.IdpIFrameHttp.en_US.Xix2UhUizvE.2018.O/am=BECAAQ/d=1/rs=AOaEmlFiGMmyuK6UT0QFyK8IRuNoUPK3ng/m=base HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"boq-infra/identity-boq-js-css-signers\"\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\ncontent-length: 32690\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 16:15:59 GMT\r\nexpires: Fri, 20 Aug 2027 16:15:59 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Wed, 19 Aug 2026 22:52:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 366485\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93344,"size_decoded":33657,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2665)","md5":"5b8bbd2a6fb817b9201624bc2c92593e","sha1":"e2db62feaea8f2bf2737e372a6279e225222400f","sha256":"8cc8386c6ff1fa7d8831273abbce870f326f81f88c5a1895020350c0e20ea94b","sha512":"a10c10576fda1ec60cf57e49d2e6145971201038079593ce4da64b91f678c6d15ec239e5fa3769b29c421d233995f930b768ddefb8bf75f208d5770e60d6a613","ssdeep":"768:hJJXilb3jvvP4lIk0Yc4Cgb8ajVh3ULgKAqpgXUJKZ5dRTBTYepjlwNab89tt:5Xi13LlYnjVwgKLpgXUJKtDTvpbS","tlshash":"d593f78d73a1b07282a2f5e6802f010bb17aac56f85c9cacb195d5e15eb4e45427ff3c","first_seen":"2026-08-22T17:55:28.930893Z","last_seen":"2026-08-24T22:04:40.586073Z","times_seen":6,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":2,"connect":18,"send":0,"wait":18,"receive":18,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/initial.intengo","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T22:04:02.502Z","timestamp":1787609042502,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /initial.intengo HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\ndate: Mon, 24 Aug 2026 22:04:02 GMT\r\ncontent-length: 0\r\nX-Frame-Options: SAMEORIGIN\r\nlocation: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T23:40:44.432733Z","times_seen":18086359,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.Finalorg/richfaces/renderkit/html/css/basic_both.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.813Z","timestamp":1787609042813,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.Finalorg/richfaces/renderkit/html/css/basic_both.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:02 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:02 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7238,"size_decoded":1694,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (7238), with no line terminators","md5":"128118ab95755d6109fa6af9ff5fb81d","sha1":"5490d3eb16e0a1c08c3d2c7b7672e1b0d60e8a15","sha256":"19261fd1856a610da85c291dbafb5f433d097b1cf04a1036790780bd5344813b","sha512":"12b935050a51133d2e38553d686aaab507af43d19074cb8b506dac219726d976b7f23aa13da8dafabb9316bec33cd0cf2e6409a11afb3f47f1aae20326d7cf7f","ssdeep":"192:BE21/P+uZpSYEKtJynWykvFM09vM8MnBG0YkCBQ:BEg+m72PLZC2","tlshash":"73e1e030e54c311f74e389fdb5b2fa495b0a8272ecb48b7db610b076e4994a3186f761","first_seen":"2026-08-24T22:04:40.556374Z","last_seen":"2026-08-24T22:04:40.563684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":59,"send":0,"wait":59,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.FinalMETA-INF/skins/darkX.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.816Z","timestamp":1787609042816,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.FinalMETA-INF/skins/darkX.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15298,"size_decoded":2300,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (15298), with no line terminators","md5":"a238af5e1e969b18eba6ed9f83999c86","sha1":"4d76fbd014161684a45464bfa371d6a83bbd7ac5","sha256":"573865c5ba130d70f6f66f42048e24077867f7dec11daa075e1541e5d78f3711","sha512":"1de16fa9b309b9bc415348c95543a5e621ebfa5b88c545e1bbdb556b3c61b08be6561babd38a788fb8cdb5f9db2fb69cbffb6e8e89c2ef2f198467f185210b2f","ssdeep":"192:Mv8r2xkXMH2UYIZU3Me/B05XQFjVMfmo7PtMZO4tyCR+Xw1BXSv1ZiWwZ:QRkyTteO4tyCxBXSd+","tlshash":"c862bf32d55d62bf79a3bfaabde6e7c8081b8223d4f0477e555930b460989d3903fa04","first_seen":"2026-08-24T22:04:40.564372Z","last_seen":"2026-08-24T22:04:40.589057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":63,"send":0,"wait":62,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.Finalstylesheet/theme.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.817Z","timestamp":1787609042817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.Finalstylesheet/theme.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ncontent-length: 1686\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1686,"size_decoded":1997,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (1686), with no line terminators","md5":"8159063e8487a0659c30f15caef2d974","sha1":"eab763184bac19eb8fd428160edfd0610f12e9e4","sha256":"5c7e0c02536ed2e4025db1fb946c81826f3a5d5ecc79a8c7354820c6762d1def","sha512":"ffe4a6b73e6f375f3b41e5bcea62ce4557f334fd920d7c93921eb66bd3e9fd49a3e1ca2eb315f84ca70154a42209321428e9b90549a68dba22f4a1a7e5b84b17","ssdeep":"","tlshash":"6a311614c148722f316b58aa67e2f708181715a2d41a9774fe2630fdb6c41e7177ab87","first_seen":"2026-08-24T22:04:40.565883Z","last_seen":"2026-08-24T22:04:40.568116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":67,"send":0,"wait":67,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/stylesheet/theme.css","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.819Z","timestamp":1787609042819,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /stylesheet/theme.css HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"4425-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4425,"size_decoded":1755,"mime_type":"text/css","magic":"ASCII text","md5":"24dc3b12e3d6dc6600d870bec760f56a","sha1":"8dbad0619c020eea03b3f9c80fe52c1dfdb3f72a","sha256":"1441a170b4cb266fc0e0bc45ab204a927aaea9c1b6bfeb1d07d80319bbf021b2","sha512":"7162a85e7b40b8f8bbd34059196074d8edda0e797b613c99a9748ffa80b49f4adbb5bdd84b3aed26f297f1aefe47cf3e7ce3aa9e2ee5d712e86fa4459296c766","ssdeep":"96:f3sYRehotLEnMFXPdNhwOktKRHaASeJ1hjXB1T07CCM4lItuzyu:/fchoJPdvw7KRHaA9JBBAm4lItuH","tlshash":"2a9110136b822c9ab11e60e9ffa1eb75ba0f05972e6faf752441357cd7840e40376a4c","first_seen":"2026-08-24T22:04:40.567438Z","last_seen":"2026-08-24T22:04:40.568604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.Finalstylesheet/intengo.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.820Z","timestamp":1787609042820,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.Finalstylesheet/intengo.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2421,"size_decoded":1067,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (2421), with no line terminators","md5":"b1a3236f84997fa70466eb0094f41002","sha1":"39d63f7efcd45df9ffac9e0769bf03d1ee97dcd7","sha256":"78c23edfe76858a01122ce77519c661bb7396748ecfdcbb63a5099ab2ae8f8d3","sha512":"4d9f96488c2fc070908c15e51274e736063d8231ed3e08a817f0e013d4ad3ddf6a9ccd8f4e23f627584a5c8fbe8dbbe3e30d384e3651acc5a138708ebc31c3af","ssdeep":"","tlshash":"37413760f98a106f344fe2bdd0b1f656412a40d1dd6b5b78797b30a1cb8a0e53a6bb48","first_seen":"2026-08-24T22:04:40.56923Z","last_seen":"2026-08-24T22:04:40.580605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.Finalstylesheet/formbuilder.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.824Z","timestamp":1787609042824,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.Finalstylesheet/formbuilder.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ncontent-length: 635\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":945,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (635), with no line terminators","md5":"b2bf60f746ad52aa9de4b6ce60b17f69","sha1":"205adf6656ed262d96dbf67f66ef66bbf8f26c70","sha256":"de5322632c72a026ffe5cd52f61eb8080e883c94f0dd47073f6aa8ce5454f1f9","sha512":"9be2d73c41e8a97d6ba1c44527ea3cf162719c5a268dcee9b34967265d9b22f8518539420c2fdd6297d0f0e78b7ff5523d5c5f48a52ac0b8e80be7dfb03a0b9f","ssdeep":"","tlshash":"71f0af94e8523873308bd75c01e0ebb6893d1ac0f861c7797022f4a96b190a43d9bb81","first_seen":"2026-08-24T22:04:40.570684Z","last_seen":"2026-08-24T22:04:40.594597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/stylesheet/countdown.css","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.825Z","timestamp":1787609042825,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /stylesheet/countdown.css HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 1038\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"1038-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1038,"size_decoded":1290,"mime_type":"text/css","magic":"ASCII text","md5":"8a70f92ca6cf6cf37ae901e2760404ea","sha1":"0b8577dab9dffef31388a2a4eec3aff78a92ebf1","sha256":"6f50057937d44bf99cb1b6f0c742d25770cb126ce3119a2693c14373d7676a87","sha512":"99685043211fb14db490aaed459454429823e4d052b8df5ae74979795c53f2aa3977870f6b7637e1ae97de27f9ab241478790885a59d7ac75434c2cf69095fa4","ssdeep":"","tlshash":"f611d1c064b414772c97c67dbfa2870d16af0e84db1f8a9159f8686c273b1694b32486","first_seen":"2026-08-24T22:04:40.551265Z","last_seen":"2026-08-24T22:04:40.572664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/jquery.countdown.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.831Z","timestamp":1787609042831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finaljavascript/jquery.countdown.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15045,"size_decoded":4634,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2371)","md5":"1b907117d4c755ec9c3f08de78677a22","sha1":"18b9159583543aadbbf84eea64cf31defcc28507","sha256":"021fe0b73e612311675ee600f809ea1e316610a0367f3dd837116267a62c01cd","sha512":"d12d9381e4a1a45bd6b2ccbdc3cc38e5155f9eab1b77e3cf778d6709278df1643cfb8541b1e07682fee56418f339a84f924704e0cf0fd3e71bfef561abeac65e","ssdeep":"384:QbrXvqV2NdLmRXp7gxfHTUcDyaYSgGBnz+iESERF9O:yrfPdwIfQcDyaYSgGlz+xSEdO","tlshash":"1462c64523a01381ad5f92760d3f630619324b558d02bb34ad6fcacd6f28ac7a62b6f4","first_seen":"2026-08-24T22:04:40.560291Z","last_seen":"2026-08-24T22:04:40.573609Z","times_seen":2,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/interface.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.835Z","timestamp":1787609042835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finaljavascript/interface.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79189,"size_decoded":28838,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65535)","md5":"ee05191114ae3c4446a6443aac1eb22c","sha1":"7802a5d0bcccac72757ebc8ae49634ec5bd6610d","sha256":"823ec24186ccdf6b1cd2e515683c5a0bdf9aeb48f0e736c293351de24233fa55","sha512":"6281d4997cc4d16a0592e982385cfa739b5256fd0328a9d2bd284c1d729c22e692ce516fca77397dec46b34a5ca3e66069a39700f0dabe6438277a0c43d478d9","ssdeep":"1536:rHDyGqpuE7JfgbwmNBOGlHD4IwLyvvyAML3pRWKJH1ay82uWu:rBq3GFcL3zpa5dWu","tlshash":"94731a2e691301b60fe4f7b46d0f5e096bd141de8af94465e1a9f0db14f0022a9d2afe","first_seen":"2026-08-24T22:04:40.574417Z","last_seen":"2026-08-24T22:04:40.596928Z","times_seen":2,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":65,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/js/platform.js","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.051Z","timestamp":1787609043051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apis.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:44:44 GMT","end":"Wed, 28 Oct 2026 20:44:43 GMT"},"fingerprint":{"sha1":"63:25:40:E7:30:3F:B5:18:5A:5E:22:5D:73:26:2A:C0:0F:E1:54:5F","sha256":"9F:2A:39:6D:40:70:E7:D8:6C:9A:97:2D:4B:32:CE:BE:E7:7B:44:3F:C2:1F:45:1F:2F:1E:51:18:41:84:E3:5C"}}},"request":{"raw":"GET /js/platform.js HTTP/1.1\r\nHost: apis.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gapi-team\"\r\nreport-to: {\"group\":\"gapi-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gapi-team\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24730\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\nexpires: Mon, 24 Aug 2026 22:04:03 GMT\r\ncache-control: private, max-age=1800, stale-while-revalidate=1800\r\netag: \"d359400ee9d5f142\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64840,"size_decoded":25588,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1863)","md5":"f08bd3402f78f38ace991145a64e09ce","sha1":"1991f34e3514da45a7b16b96e4620ea260241a93","sha256":"f0cd0303adfd9144a394a3d0d307a7529f4b69fedd3ac61b69a536dda6b549ff","sha512":"b7b48ab1c2e02e50976751a031316ffaeb4a0b9c560c66b9926d9efb7af889ae78618c7dbb1ae921ddcf28ef8609dd7dda9f44ff171a81c4fac3bbeafa09798b","ssdeep":"1536:0DGSJRzsqdJ0mzAyPIxG531y/fN6M6GZBJZL:2RzjVIU5A63GJ9","tlshash":"1b53dad976a5702283a3b5a5103f010ef17f6da9fc4c98a8b199c4e42d78e89017bf7d","first_seen":"2026-08-13T01:13:56.473185Z","last_seen":"2026-08-24T23:53:37.645723Z","times_seen":505,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":31,"receive":6,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finalorg.richfaces.renderkit.html.images.SliderFieldGradient/DATB/eAH78eHV!!!!mQAZ-gXS","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.364Z","timestamp":1787609043364,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finalorg.richfaces.renderkit.html.images.SliderFieldGradient/DATB/eAH78eHV!!!!mQAZ-gXS HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/a4j/s/3_3_3.Finalstylesheet/theme.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 170\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170,"size_decoded":462,"mime_type":"image/png","magic":"PNG image data, 31 x 55, 8-bit/color RGBA, non-interlaced","md5":"bd0a001309520eb62de745032942221a","sha1":"4d1afc5537884560c7bf2c518e778faab159f9a3","sha256":"80ad40bcb9c0d944a07a7b330620c15f3359881ce10e093674b7207218ef96e5","sha512":"3a9c3c02230a4d6d1e5d66122bbcf5545fbc945ac4b1326d053aaaeb5aef0d3f67584869daba34a828bd2e020a149160056460a2e77adf54a2c7f1d4a198a462","ssdeep":"","tlshash":"b0c0c05190106525c9df073105284127cd652120016110302d15d43a390310100b8033","first_seen":"2026-08-24T22:04:40.579809Z","last_seen":"2026-08-24T22:04:40.589819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/msgwarn.png","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.367Z","timestamp":1787609043367,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/msgwarn.png HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/stylesheet/theme.css\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 684\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"684-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":684,"size_decoded":935,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4fb90d6239c0cd2a8e1a132f225a097e","sha1":"9797538de36dc310b6234d0b714edd3a9504284a","sha256":"5386e7a430d134810b441b79e699222947361fd08c3f40c6f77ddee4831c94c7","sha512":"7ff91bd9e4d24db9a2becf511c846259d25cf7520f4c94d2120a4a5aa3bdc8856954ac3d0f2bf8044d717d38847683a2bc53c37defd246f559e35d07ef309142","ssdeep":"","tlshash":"6d0110fb890e21becadf8075dc5471f14c1aae2c4123502026b8443827e460843922b2","first_seen":"2025-12-30T03:53:35.678259Z","last_seen":"2026-08-24T22:04:40.581421Z","times_seen":15,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/u.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.388Z","timestamp":1787609043388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/u.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 36\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"36-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36,"size_decoded":285,"mime_type":"image/gif","magic":"GIF image data, version 87a, 1 x 10","md5":"d9f488db45e7377baedce6e0997af1cc","sha1":"13bc9d310372d953431e5522bd8a9cabb5afe2df","sha256":"0ccf453250b343d3879195adcfa5bfcc2b8d5c516b11ef955d410b5206c56dab","sha512":"3210e326eeddd75a2af2be8a7a195afdcee1572dd69e865d977cec9fdee70268bcba1b5f0a8bda7521a8c488298c226c92b2df59c15d8a3d224491dee3af7b46","ssdeep":"","tlshash":"92800002ae8a8200c20280208888a2802b00a220020022022038038c2e8aa222a8a020","first_seen":"2026-08-24T22:04:40.583376Z","last_seen":"2026-08-24T22:04:40.590545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/b.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.407Z","timestamp":1787609043407,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/b.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 36\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"36-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36,"size_decoded":285,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 10","md5":"9e3e6144322fb282f2fd6322da96ce52","sha1":"1b04e0aeef2de5fbdb4ecc2356c60748a1684a41","sha256":"866546169f36303902fcea5473b6118c2abc4fb16638ac1ac1b406cae37b516f","sha512":"b8526153c736597448d53f01b7a50ac8a11b1c61164e3b82871583245322449806233db5b6ce532f9e6a47b8ced9810e02ec2a4a03551613dcb9ab9247782414","ssdeep":"","tlshash":"228004417dcdc101c1c344304cc457403f40d11001043303703403cd1d5f1311ccd040","first_seen":"2026-08-24T22:04:40.553985Z","last_seen":"2026-08-24T22:04:40.584538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.zhTT8Br0Ho8.O/m=signin2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-7LeULGjNQZRvhdu3G71akb6JY6A/cb=gapi.loaded_0?le=scs,fedcm_migration_mod","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.414Z","timestamp":1787609043414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:25 GMT","end":"Wed, 28 Oct 2026 20:42:24 GMT"},"fingerprint":{"sha1":"23:74:91:83:30:33:0F:CE:BE:EB:94:FB:C9:D9:4E:31:00:D5:B5:33","sha256":"BD:78:5B:6D:EF:14:48:0A:A4:37:C1:70:85:06:55:5B:D1:DB:0A:AF:52:86:B0:A3:84:E6:CE:7F:2B:44:B6:63"}}},"request":{"raw":"GET /_/scs/abc-static/_/js/k=gapi.lb.en.zhTT8Br0Ho8.O/m=signin2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-7LeULGjNQZRvhdu3G71akb6JY6A/cb=gapi.loaded_0?le=scs,fedcm_migration_mod HTTP/1.1\r\nHost: apis.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"social-frontend-mpm-access\"\r\nreport-to: {\"group\":\"social-frontend-mpm-access\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access\"}]}\r\ncontent-length: 57831\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 23:06:15 GMT\r\nexpires: Thu, 19 Aug 2027 23:06:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 428268\r\nlast-modified: Sun, 02 Aug 2026 15:19:54 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":170817,"size_decoded":58747,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1574)","md5":"ffd01a21134217432f7b62ab578deb92","sha1":"596450fc5d289fd36d96c24242f4673d5993c6ba","sha256":"dc1cfef892cc862a2aec49812e268765a2beb50fee5f8fc2b0c6370c9dc8ed80","sha512":"c0507c7dc4a525700f1ca2d335ff23de640ddd864055cc5207f8e8c35ac6948aa7f56f19bdba8da5db3e02208b54e1df65d0114549304ba50e6da9b669906452","ssdeep":"1536:LwYm6iE13eyv2rcytXFBRbyF57QrAJM/09KVOyQvHLUDhKKhxvoxudJyizZ6NIIP:zsyvR5k09KVqLi/3vo0JnzoGJqZX","tlshash":"04f3b7d9b6a270668363f4a4503f010eb27fa8a9f44c5cacb288d4e16df5949417bf3d","first_seen":"2026-08-23T14:08:03.768334Z","last_seen":"2026-08-24T22:04:40.601325Z","times_seen":4,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T22:04:02.063Z","timestamp":1787609042063,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:02 GMT\r\ncontent-type: text/html;charset=ISO-8859-1\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nset-cookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20; Path=/\r\netag: W/\"92-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"F52B1154DE0FE9A84757A92DEFF51A20","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T23:40:44.432733Z","times_seen":18086359,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/formbuilder_library.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.831Z","timestamp":1787609042831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finaljavascript/formbuilder_library.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3012,"size_decoded":1346,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (518)","md5":"c4ce11a653c20ce784c4e641eb3554b8","sha1":"23664114c57caa1c58f05ab8145e8c75f0f90bd4","sha256":"524fbd074ddee587bfb2f6757cc0bd3d6d23d6d251cbd98be42210449f7d2815","sha512":"17db7294b6738a15270cad2e42452122f89e24544390f76956a9afac4567eaa53be910b77d1dea97c948236015fb314b11811b264adb219b17bc6b6a3d70d3c5","ssdeep":"","tlshash":"d251408a7a1870b980ef3079a47b0ffe763b824dd5284140943285d024b5f95da2fb6e","first_seen":"2026-08-24T22:04:40.5821Z","last_seen":"2026-08-24T22:04:40.586486Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/seam/resource/graphicImage/thelogo.png","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.068Z","timestamp":1787609043068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /seam/resource/graphicImage/thelogo.png HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 4385\r\nX-Frame-Options: SAMEORIGIN\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4385,"size_decoded":4562,"mime_type":"image/png","magic":"PNG image data, 120 x 39, 8-bit/color RGBA, non-interlaced","md5":"2d6b51ce32afc7405002615a7a2633d5","sha1":"6536ce9a28e9ad8b837677abfeb9a1ac861714d8","sha256":"16f5e08c11c7bb19fa16134828486722fcc7d32239130d2b4bedf98248da12ad","sha512":"896ab74069afdfb05ba8d5d90ff22cae55c4c6cae3a9d784da685b84d26e492d3e9de6c14f84cfa937fe3a16db62cc81257b627af13cd1e085c900a969151850","ssdeep":"96:PP+0Vcc98NXWC0X+bkjDScHfsGYkYFicDCjp+KdlvpHKlF:PPScsjrksGjkDUjdlv9KlF","tlshash":"d7916cd3bd414dec900ce7a990239c91f7d2666a708c5e020f83d012f7f671a4d797aa","first_seen":"2026-08-24T22:04:40.562856Z","last_seen":"2026-08-24T22:04:40.587236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/l.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.391Z","timestamp":1787609043391,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/l.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 36\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"36-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36,"size_decoded":285,"mime_type":"image/gif","magic":"GIF image data, version 87a, 10 x 1","md5":"e8cc8eebc867de92061139ab28eb88f0","sha1":"81e2ebdb8021304bf1792df792d70bdec85fb92a","sha256":"f1ec9905fe72b87a73bbf95e123ae9aee230f27e497ac2fa199c169535de3bd9","sha512":"2082ad5bdf742912d210e3734f2a00576af20b82390798d6fd85e5271ed80dfe359c7ee5e8c3a8bfa94be362fc305162e49193438bfb437c56bf917f3b4f121b","ssdeep":"","tlshash":"74800008fcccc220c200c0308ce8b2002b2aab300232230a30b8030e38cca322a038b0","first_seen":"2026-08-24T22:04:40.55271Z","last_seen":"2026-08-24T22:04:40.587936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/br.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.408Z","timestamp":1787609043408,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/br.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 119\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"119-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119,"size_decoded":370,"mime_type":"image/gif","magic":"GIF image data, version 89a, 10 x 10","md5":"cebc52f9f5276e1c31b99f82b166c8f7","sha1":"24109ffbf9aa99f650f5ce2cdd63999fd6924675","sha256":"25e1c68c8854b48d9c2a796d58eb4543589eba2c3995499887408f016dc83ece","sha512":"3d3cb9f4938f8fe8e084b99893634efad58a20444cd047e9083f6ef629faece26bd78f9cc43300bb38ce5927be80e3477da185ae1336aea252d2c99d2153f22a","ssdeep":"","tlshash":"37b09bf4dd505185cc763c7345d514c527618dd52d0e1590510110b45cb51380c5e4a1","first_seen":"2026-08-24T22:04:40.566993Z","last_seen":"2026-08-24T22:04:40.588558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/stylesheet/intengo.css","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.821Z","timestamp":1787609042821,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /stylesheet/intengo.css HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"6612-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6612,"size_decoded":2033,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e65f822310eb2759674cc8eeba43bcd7","sha1":"ca6a04117e632243b0cbd1c02a0a63891307df33","sha256":"98b027b4485e0cbc3d2c107ab396f9e56167dc3af4cca6d5597d4a43b9b55f24","sha512":"a39449f8143bbb5182f301c9e7c12a479df1e99c6330445d4ee92734ea1c7592ba57e0028057fdce3e9fd32d23c16691ac01e50c38880da8b5cd8e20d9c3bef0","ssdeep":"192:gOjl+ZtNE+HEt/ypDhtMJ556YwS9vZpOg2t2V:gZ/+lt56YwS9RpOA","tlshash":"dbd1df9ca8cb208e63077a64bb7097e56f4102719e9f4a9cb1e1767983c48b836765cc","first_seen":"2026-08-24T22:04:40.549536Z","last_seen":"2026-08-24T22:04:40.589399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/jquery.countdown-tr.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.834Z","timestamp":1787609042834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finaljavascript/jquery.countdown-tr.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 295\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":295,"size_decoded":593,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9b97d5269bf1f381dcf10bfc6de1f893","sha1":"19389d86618b2dc932f1cb81115b9cb225cec8f5","sha256":"1f0c65747488cac6c8763390ad997b154a398b20396ff43be10e3ab5e361f228","sha512":"831df547574bf82ef3b8e2cb3ad4463546daa4fd0f286f3ba1d12503a817bae69a857f9e621898414285e16d0bf058f50160f822bf634b6eb243e72478f98301","ssdeep":"","tlshash":"cfe0c2d882a6c1775e55f867b561cfaf2cb60e0ad1c0ff62928b1c8c61320a9452bc53","first_seen":"2026-08-24T22:04:40.58387Z","last_seen":"2026-08-24T22:04:40.590191Z","times_seen":2,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/connerror.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.070Z","timestamp":1787609043070,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/connerror.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2407\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"2407-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2407,"size_decoded":2660,"mime_type":"image/gif","magic":"GIF image data, version 89a, 48 x 48","md5":"dad846101be58bd7ab00f4c5a9bbeb93","sha1":"cf68fc870dca1108930a4243234a756768ea70f3","sha256":"5f77005ee46502a793003de8219aeeb9fc7eb2b0dcae9874d1108d5d8d376b1a","sha512":"45c3687ac66227180830c6671cb9d3fa1312b9423ccc143aef22c2e8debcf1dbf95751d6230903bbfc1b79413e03258c7578fb7b8cd627c1027a8c25f2e70699","ssdeep":"","tlshash":"9b415d1afd21094ea3859dbc59855fbb54a887ea891500f3228d97106b0df3a42a5837","first_seen":"2026-08-24T22:04:40.59093Z","last_seen":"2026-08-24T22:04:40.597564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/ur.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.390Z","timestamp":1787609043390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/ur.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 118\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"118-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118,"size_decoded":369,"mime_type":"image/gif","magic":"GIF image data, version 89a, 10 x 10","md5":"49b3acb4e1edeace23f314c7b101c71d","sha1":"722062035c9fce5583475e15e7fa05d0a66ad5e5","sha256":"f2deca542c455bd4015856ceecc8b0b4e46c88e6754ad960e129680b8660156f","sha512":"dcb1acc68384ff585a1311ce9b3b202e52ddcd9405b1dd2b04c5eb0f646db473f183644225536914f7d7b426b2396911d593a85c80db044d97b90ca966361616","ssdeep":"","tlshash":"a1b09bf4ddb1c0459c7d6d614df519c9676155d1644d05c04555207028f515c0555450","first_seen":"2026-08-24T22:04:40.591313Z","last_seen":"2026-08-24T22:04:40.592269Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finalorg.richfaces.renderkit.html.images.SimpleSeparatorImage/DATB/eAFjYGnzlGcBAANPAPc_","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.410Z","timestamp":1787609043410,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finalorg.richfaces.renderkit.html.images.SimpleSeparatorImage/DATB/eAFjYGnzlGcBAANPAPc_ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":326,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 4","md5":"38438d4840b5eeaeae325ae9c86c331f","sha1":"93b14db709abbb561205628931f72278f2b139c3","sha256":"c7e8507eaddf6a1ab209d417641018be2daeb492a829075da5bcd693d530a23c","sha512":"f7a1acd2bb671993d247373fc0509e4ed3c8381d0d8318c1f31c4e5a287468b1af244f0ddca09ff7755f9f70062b8717c52ea21bc37fe8c79743d6fc404f36b9","ssdeep":"","tlshash":"e7800000c2c0003aca8ca030ac0e0280a2a0ca0a2328af0b80c8b0c8bc2a038ac80020","first_seen":"2026-08-24T22:04:40.593129Z","last_seen":"2026-08-24T22:04:40.593733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/favicon.ico","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.607Z","timestamp":1787609043607,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-length: 1406\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"1406-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1406,"size_decoded":1634,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"011201ab56695ce86ea2f190bce2670b","sha1":"bb8fad6accf293e619360935047c23f00da3c769","sha256":"a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e","sha512":"56d53a1219e58ad045c96dc81d71c63c0cf5a9766add778d34895fdaa7fda8dead44161ec291f0ed3d10a405322b7973b56c6b211d68a8d82a8510b5b7c0456c","ssdeep":"","tlshash":"71210082bb20c02cc82c0b300802eba82388f00ac8e8330b30c80b8e0c0008c8ef8ae0","first_seen":"2023-04-05T07:23:52Z","last_seen":"2026-08-24T22:04:40.594225Z","times_seen":22497,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp.withgoogle.com/csp/IdpIFrameHttp/fine-allowlist","fqdn":"csp.withgoogle.com","domain":"csp.withgoogle.com","tld":"withgoogle.com"},"ip":{"addr":"142.250.178.81","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fgarantibankasi.intengo.com\u0026rpcToken=437109916.914139\u0026clearCache=1\u0026supportBlocked3PCookies=1","date":"2026-08-24T22:04:03.988Z","timestamp":1787609043988,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /csp/IdpIFrameHttp/fine-allowlist HTTP/1.1\r\nHost: csp.withgoogle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/csp-report\r\nContent-Length: 586\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://accounts.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":586,"data":"{\"csp-report\":{\"blocked-uri\":\"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdpIFrameHttp.en_US.Xix2UhUizvE.2018.O/am=BECAAQ/d=1/rs=AOaEmlFiGMmyuK6UT0QFyK8IRuNoUPK3ng/m=base\",\"column-number\":1,\"disposition\":\"report\",\"document-uri\":\"https://accounts.google.com/o/oauth2/iframe\",\"effective-directive\":\"script-src-elem\",\"original-policy\":\"script-src 'unsafe-inline' 'unsafe-eval' blob: data:; report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp/fine-allowlist\",\"referrer\":\"https://garantibankasi.intengo.com/\",\"status-code\":200,\"violated-directive\":\"script-src-elem\"}}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: text/html; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 24 Aug 2026 22:04:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-QySCpPhANQL4t--8FScXBw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /csp/_/CspCollectorHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /csp/_/CspCollectorHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /csp/_/CspCollectorHttp/cspreport\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/csp/_/CspCollectorHttp/web-reports?context=eJzj4tDikmLw15BiEOLmuPJ_0xU2gRuPF0gp6SXlF8YXpyaXFmWWVOomFxfoJufn5KQml-QX6WaUlBTEGxkYmRlYGFrqGZjFFxgAADLBF0Y\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T23:40:44.432733Z","times_seen":18086359,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finalorg/richfaces/renderkit/html/scripts/jquery.hotkeys.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.048Z","timestamp":1787609043048,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finalorg/richfaces/renderkit/html/scripts/jquery.hotkeys.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4190,"size_decoded":1906,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"40313ca74b48df441e442a59e5cb06c0","sha1":"bce4c771e757e98149864b6c85e161a5c020f01e","sha256":"7f4df5ee3657bf848d67537313debe9804ebc3c260e685e02c18bc3564cfc706","sha512":"3fa52d28eccde82cb9040d9bed7a5b3ec68a54ea8b9a9f810630c222a199bad43b1294da3bdcd256715a53cda48227e22942a098df71d584a9e9002af4b9488e","ssdeep":"96:psSbUNbMVny+a/e9/uSyAmDyHrmDyRXo4hremugK2p:8L+a/yOAnLnpvhremugKs","tlshash":"bb81534ab78a658814fbd53fe6f7cb2af53c4acc04f75418a9954ce805389403702bfa","first_seen":"2025-11-11T18:58:13.463304Z","last_seen":"2026-08-24T22:04:40.610734Z","times_seen":7,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/stylesheet/formbuilder.css","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.822Z","timestamp":1787609042822,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /stylesheet/formbuilder.css HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"4740-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4740,"size_decoded":1329,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4e6b849e87a82bb0057fd9d693fd6f1b","sha1":"de037574160c70aa83d5fc1fb5771bb8416a8a47","sha256":"bbe88bcccab338f8e9c885baecf71dfca7afe214732a9e8ac51f16a1a1be71fe","sha512":"c7648537e8ac62348f7346b448970f512a2caa36217eee737987bf235875e6320040ec01995d7f3cf0b296e99751f9e4f8192e67421fe0f6022c415a6f30c15b","ssdeep":"96:i1l3qzVFsN+JJ+I0gopKAFJcEcMV0kwx+RJQbEqMbqehbqrcbq+hcqQq6hqvcqlh:PfOd8Abg0m0","tlshash":"06a1adb9fa97309f332bb6a6f731d6907b2617764b0e8334f5e4512ad5800b8386349c","first_seen":"2026-08-24T22:04:40.596321Z","last_seen":"2026-08-24T22:04:40.604673Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Final/org/ajax4jsf/framework.pack.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.808Z","timestamp":1787609042808,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Final/org/ajax4jsf/framework.pack.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:02 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:02 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319163,"size_decoded":91111,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (793)","md5":"8fe0a5d98d1fe132cf856365c5740a08","sha1":"73479199fbc0cf28c62949a1f744bc72f9dbd047","sha256":"5c5da749f266c59a8bb7bef2c3eb4001fc410c54aae1ec882974586bdd19fad2","sha512":"15ae9b8ea39dd32edad9c2b963c2d146dfd4fa640de64003f1d014f9ac235067c6ec0249ce132460d2db942302cea3ec3f76ba06ee9fce4ecf646d2cc30e7070","ssdeep":"6144:qEUgbw9fs2mn8SJaOraoRgU3Er4wx+vlDXMgpDs1/UvX5tOOeDQ:6gbwzuLaoRgU3E9aDs1/UvX5tOOeDQ","tlshash":"ed64078872867a7606ff6178206f278eba7694906548c06cf07ddcd5acb4e1a403bf7d","first_seen":"2025-09-23T23:27:29.260784Z","last_seen":"2026-08-24T22:04:40.608715Z","times_seen":6,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljquery.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.828Z","timestamp":1787609042828,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finaljquery.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76617,"size_decoded":22293,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1857)","md5":"e5c60cde8c6e2f470a411af1a7d29865","sha1":"569ab1fdd52a5de3686bf00a5b7adc2fc75d9596","sha256":"217ad0498376f19a09644d51d1db4d231e1a03d68370223043a7d7304b5077a6","sha512":"e70949ac42da7efdd71f615d9bc5478393492d08c1e701b5bbda8a5460ef66582d3357aa3cf2e5e50db982e74fd6ce618366a1be074f571c73b7db07242c3486","ssdeep":"1536:NLYk5QZbvcRiWFo1k8Jc/e6ynWga01ITRqeI1BogSgrcCQRaHC5QZX:dx+Ubyq1Kr1ICQRaHC5QV","tlshash":"ac73d89c7689603e82fb21bbb83f575d713696a6590c8041f16c9ce47eb8d41806bfbc","first_seen":"2023-03-08T07:44:04Z","last_seen":"2026-08-24T22:04:40.599494Z","times_seen":28,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":70,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/jquery-ui-1.7.2.custom.min.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.833Z","timestamp":1787609042833,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finaljavascript/jquery-ui-1.7.2.custom.min.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":185972,"size_decoded":45987,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65535)","md5":"e78a4e85b0f3f771dcaa40857a582ab9","sha1":"b11e2bf3b9d3d8a0d98187f7ffaab6e86f0c5ef6","sha256":"b3de39b0c7e4e28608bad329a2014a24311bfb3f0a0b76b6267238c22b350713","sha512":"4a73b6fabdbfaa620c6acf28725cbbf63263ac945cb1adfa00ab5932f19e2389b0b35944fcd2ef8ac1e94e6ce145ba7e43abb3a7ef1117e3d50172c3bb42bd8d","ssdeep":"3072:0T6DcBb96aoapumbIJIvHIGW+/Rde0QacU:02oBb9dr1bIJIQGW+/X0U","tlshash":"6f04074d7205363a89efe279106f1b0a623291599701c15cf43cc9deaabde4421bffb9","first_seen":"2026-08-24T22:04:40.570121Z","last_seen":"2026-08-24T22:04:40.600189Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":74,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/newloader.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.071Z","timestamp":1787609043071,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/newloader.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11066\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"11066-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11066,"size_decoded":11321,"mime_type":"image/gif","magic":"GIF image data, version 89a, 220 x 19","md5":"63ca79e89815b99286d20b59c2e03d28","sha1":"b57aff6e0552c1e1232066ea1871be0321a1ff19","sha256":"fac38244ad8f7204f4a68e5f6a15acec861d48de489b5bb5dd9748680ef3a3db","sha512":"d5477bbfb1d60de23e9886b4d03bfbe58dba070e0e7830faa46bc1f87cfc0725f7182925ae1db2412b474237cb0bb24edae6351996b64ba95ba3a0bf53292483","ssdeep":"192:cxk0nyotLYOYDHFXdNG6eb7AqqQbyqgsZdJSllbYUXSAZYVKLdRLduYKJFcreX:cxkMtL0XKAqzbFZdczNCArLdRLwhJKry","tlshash":"8932ae39b6494a73d015653be71643cf092e2f6542b45ab11df0f2bedaf449631ac222","first_seen":"2026-08-24T22:04:40.598366Z","last_seen":"2026-08-24T22:04:40.600862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/intengo_logo2.png","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.072Z","timestamp":1787609043072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/intengo_logo2.png HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 9537\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"9537-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9537,"size_decoded":9790,"mime_type":"image/png","magic":"PNG image data, 107 x 41, 8-bit/color RGBA, interlaced","md5":"92e6f60d2d90ccafeb12e8cb7018f596","sha1":"542cd1ff70eec08eeeee0273dffe6bab8c84fb2d","sha256":"21bbdf492fbfd7782c62fb39e362b5d91b1ad6e5de1717655f23a4568e0e6e4e","sha512":"e9527f494cac85fbf437b55672dc84df5bdf1a0a35f87fc8e48191b3df388590b0a5191155fb551740eac89a8f949137ad12eb3ca8fb26e1b0ecf0c0d8ca7908","ssdeep":"192:3S0tKg9E05T8SwdUZB/XFaRYHpYd8ldaHbLmeYCln4R/GrvI:dXE05Hw/YWdoaH3f4tGrg","tlshash":"ec12b1fdd8a8d09e56ec7f209591db038ec9208eff25d7a519e0606e2087d87134177c","first_seen":"2026-08-24T22:04:40.56494Z","last_seen":"2026-08-24T22:04:40.601683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/r.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.402Z","timestamp":1787609043402,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/r.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 36\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"36-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36,"size_decoded":285,"mime_type":"image/gif","magic":"GIF image data, version 87a, 10 x 1","md5":"be2d67643a4b7963fe75b471659e59be","sha1":"8a4894c9905426edbcd3cd9ba115185bddd44ff7","sha256":"2b3913e2a89ab462ed938257cd83d64cc70f323b7b68599a56b7ca6c1643ed1e","sha512":"783aa099562e80cb0b08cee7aeae600f47965ad71d176a79499161560fc6a9362e2e7a924c9ee00140a91d85e82532ff9743ecd7108001a0d40e546c77dd368a","ssdeep":"","tlshash":"46800444fcccc111c04144304cd4770017555730003113053070030f14cd53135434d0","first_seen":"2026-08-24T22:04:40.602294Z","last_seen":"2026-08-24T22:04:40.612895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/login.intengo?cid=31880","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T22:04:02.692Z","timestamp":1787609042692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /login.intengo?cid=31880 HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://garantibankasi.intengo.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:02 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=EmulateIE8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.7.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23734,"size_decoded":6034,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3094)","md5":"9941afc1e36c5ce489d5e7f668c67f5d","sha1":"c20027631917115a636990eda1db2ebc362fa924","sha256":"8b2de23e876e7eaf687ebd4bbe1d0ed8e947a60a411cbf1fdb47c65164da2ef3","sha512":"dc6ddd69ee6c6d191008a13deec4c995cf3c37ca81483474cbde08034f332e61c5183b474cbb2d5977aa14ab76e8890f752e6624e3c9186c6ab2af9cf9bb8877","ssdeep":"384:rumU2222gvhqPu4wHXf9U5WHBvJcDA3SKrscBaYNy:1qGxf9cWHBvJcEsGy","tlshash":"9fb2c514ca4d9d3b94a224b5e5a0de4854ffc23ac3018d587aff0477bbc4ed40969bab","first_seen":"2026-08-24T22:04:40.603669Z","last_seen":"2026-08-24T22:04:40.603669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.Final/org/richfaces/skin.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.815Z","timestamp":1787609042815,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.Final/org/richfaces/skin.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88365,"size_decoded":11840,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"09b8773eedacc377e43dc46ed46be41f","sha1":"46b21c1f8542a3473a8ef9f8812a52856cfdb52e","sha256":"9f8f82e19d7075f0806dac1b4b9c84225b83304428171b905703d4fd59dec59b","sha512":"879e8cee4fa281407306db2360cc2f3801bf01fd5fbe74c58321c70bb637d5cb92b774c99ee8e6875d5f63f397d4f0e7ec79ccc7d8d2e2580c47bfe2ffaf1d0a","ssdeep":"768:tGe2RLPA07/SWYd7tuxvFZgmFUKkGk1aP6+h3E4S+i:tGzLw+vvgj1Gr8","tlshash":"57834d30f54c102f70ab96f6b5f1fa88541a8293ecb25bbcf6553174e88a0e7112f796","first_seen":"2026-08-24T22:04:40.603133Z","last_seen":"2026-08-24T22:04:40.605041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":68,"send":0,"wait":71,"receive":64,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/s/3_3_3.Finalorg/richfaces/renderkit/html/css/oldschool.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.049Z","timestamp":1787609043049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/s/3_3_3.Finalorg/richfaces/renderkit/html/css/oldschool.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__ HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css;charset=ISO-8859-1\r\ncontent-length: 1175\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1175,"size_decoded":1486,"mime_type":"text/css; charset=ISO-8859-1","magic":"ASCII text, with very long lines (1175), with no line terminators","md5":"b675ff58cb68d370c0b5c0e96183564f","sha1":"a569afe4301e00f1ebbb55d40f1a382268b14b37","sha256":"b8bd0ab1a76767d8486acbf15251007b0e008adfb311594e23a8217d2452c137","sha512":"1f862f0af4d24a78398c43a99635dcfd39ecb40d7b9a3c04c2d7d548a87cadda7df47689b4e12fa194a4959ae746b42343b55db1ab37c8800e2df0a29d4aabc9","ssdeep":"","tlshash":"d221fe30f34814ae7627d386b4d2bed924ac9a41d8991f30bd987b787cc22660b177c0","first_seen":"2026-08-24T22:04:40.561696Z","last_seen":"2026-08-24T22:04:40.605763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/img/ul.gif","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.385Z","timestamp":1787609043385,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /img/ul.gif HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 118\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"118-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118,"size_decoded":369,"mime_type":"image/gif","magic":"GIF image data, version 89a, 10 x 10","md5":"b922b43f7de0f1d1f756c290171c0f28","sha1":"f94127d1d6419eae22e0e8cf28632c4760a31ab1","sha256":"2f8cc33a89a587411eaedd78e3157c43c6ed5b7fe409333d2f6f846d732e9e9b","sha512":"1d46b9f1e9051d3506a0b5253cdd3d39c2513878b9257e92a4723620ee5422f92a676a4f4fd49bad3e0ce6c4102d8237d9bff7b77f61a962394ce8e8e9acf267","ssdeep":"","tlshash":"8bb092f2cee4004addb96da209fa4ccb676618e5a99e1d8584422579b8b7228081b8a1","first_seen":"2026-08-24T22:04:40.606542Z","last_seen":"2026-08-24T22:04:40.606788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finalorg.richfaces.renderkit.html.GradientA/DATB/eAF7emRym6c8EwAQ9AMt","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.401Z","timestamp":1787609043401,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finalorg.richfaces.renderkit.html.GradientA/DATB/eAF7emRym6c8EwAQ9AMt HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/a4j/s/3_3_3.Finalstylesheet/theme.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 230\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":522,"mime_type":"image/png","magic":"PNG image data, 30 x 50, 8-bit/color RGBA, non-interlaced","md5":"d3e96592beb6bbbb5f235f113a1db350","sha1":"6faabfea5d22338637f50ad547703d91892eb459","sha256":"030567d9071c4994d8ceb45fda9db58d9f0993f890f7b27d22355a70b60a5426","sha512":"08119ea06597302e578be2c117a66683b359a2823895a2c9108c6a010230226c0b6c8c04d65494fc49be58d3b577a4e9b92f320b7db984bbacea7246aba4af52","ssdeep":"","tlshash":"58d097de2d488e3cc28f2a3ac27ad04365a04c213e32b0888ec33f344e1218d2282372","first_seen":"2026-08-24T22:04:40.592639Z","last_seen":"2026-08-24T22:04:40.608404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finalorg.richfaces.theme.images.FooterBackground/DATB/eAE7cODAp0-fmQAWDQUa","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.412Z","timestamp":1787609043412,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finalorg.richfaces.theme.images.FooterBackground/DATB/eAE7cODAp0-fmQAWDQUa HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/a4j/s/3_3_3.Finalorg/richfaces/renderkit/html/css/oldschool.xcss/DATB/eAGLlv7nGrp8hjQAD34DaQ__\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 344\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344,"size_decoded":636,"mime_type":"image/png","magic":"PNG image data, 1 x 96, 8-bit/color RGBA, non-interlaced","md5":"9b362e8d194d06c3551b3a0d9ee4265c","sha1":"8f085324cbb7bbd429fc25a6438fc1c7d3e57316","sha256":"f2141868a2673ce7bee0e5a292418b7f8460ce1eac6e26c9b79d5dc28cee34f1","sha512":"4203f2283e3fcb4c39a4f607ce59f7fdca2874fc418be07851dd1598156020551d8dc76c091a7171c8dc375bc9d7abf29e46c02ceaf5e298f42d2c162529f1b7","ssdeep":"","tlshash":"70e0c0f101b45e87c39850b9f07287e5ed20c14c587b30080a822e75e92305285c57a6","first_seen":"2026-08-24T22:04:40.599887Z","last_seen":"2026-08-24T22:04:40.609031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/o/oauth2/iframe#origin=https%3A%2F%2Fgarantibankasi.intengo.com\u0026rpcToken=437109916.914139\u0026clearCache=1\u0026supportBlocked3PCookies=1","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.743Z","timestamp":1787609043743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:44:35 GMT","end":"Wed, 28 Oct 2026 20:44:34 GMT"},"fingerprint":{"sha1":"64:D6:F8:4D:6D:41:DD:C8:84:FF:B5:AF:E5:36:6E:EB:F1:FD:B9:4B","sha256":"64:03:31:A4:45:80:6B:21:97:39:5A:8D:6E:60:1D:8A:7C:16:0C:7F:ED:80:30:EC:46:AA:D6:FB:DF:D0:CA:07"}}},"request":{"raw":"GET /o/oauth2/iframe HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp, script-src 'nonce-Zv-aQciBDsYbRiTcxgCwbQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp/allowlist\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data:;report-uri https://csp.withgoogle.com/csp/IdpIFrameHttp/fine-allowlist\r\nreporting-endpoints: default=\"/_/IdpIFrameHttp/web-reports?context=eJzj8tDikmJw0ZBiaL15jnUyEJcsOs_aBMRdQDwDiA0VLrHaA3GRxBXWBiD-VHWDVaD6Buu3Yl82lhJfNtOQQDZnIBbi4bj8f9MVNoEJR98uZ1ZSS8ovjM9MSc0rySyp1M1PLC3J0M0oKSmINzIwMjOwMLTUMzCPLzAAAPl9Llw\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":578,"size_decoded":2411,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (578), with no line terminators","md5":"5d297ddd3c3c9317fc55cc2d40493f9b","sha1":"ee5b32e66bfcdf9db985cf5e36e0d63ba8387e5f","sha256":"efe22ae8f8ae7e6de2a608d83838ac0a6127f86c78dfa0c8ec16f312696d143e","sha512":"49436c39c7fbe886563040e624043d34c354ea86f3f06fcde031f3d9ff3f698d2a29f6dd6ee7a076c45aaecc4cfcce80a5be3289d7258c47643c756721b0a245","ssdeep":"","tlshash":"66f0967f98c1a42cb0217c20da3d920dbbc61ed0e821ec0288b2806d5b5daf64d2ea75","first_seen":"2026-08-24T22:04:40.609744Z","last_seen":"2026-08-24T22:04:40.609744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":6,"connect":16,"send":0,"wait":113,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/stylesheet/jqcontextmenu.css","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.826Z","timestamp":1787609042826,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /stylesheet/jqcontextmenu.css HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 924\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"924-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":924,"size_decoded":1174,"mime_type":"text/css","magic":"ASCII text","md5":"2c9cbbd8f6a818a4a3beef0412380d80","sha1":"1ed4b2048061b53dd324efb811cabb51e94510fd","sha256":"d24c10c17e3159e32858b60a921e7eb259c800bd41ff74e926cb9df8f053699e","sha512":"f9186caae76c494b0b4125237945cd57b6402cd4219d50280c44eafe2af5ceb571ecbda008ea2a95e01757319383de82e3c2102da631186ec7870f677ed934bd","ssdeep":"","tlshash":"aa11bdfd495da204351e90a184a2c38767399216f34681fd1afac45863cf5dc42f3f8b","first_seen":"2026-08-24T22:04:40.609437Z","last_seen":"2026-08-24T22:04:40.611011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/a4j/g/3_3_3.Finaljavascript/library.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:02.829Z","timestamp":1787609042829,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /a4j/g/3_3_3.Finaljavascript/library.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\nlast-modified: Sun, 23 Aug 2026 23:05:37 GMT\r\ncache-control: max-age=86400\r\nexpires: Tue, 25 Aug 2026 22:04:03 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22716,"size_decoded":5040,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1331)","md5":"17d70298de31da046dda98c00ccea088","sha1":"10c73cad3008b654d07c50ef5b759868f2893ac3","sha256":"b0f1de98b5d1922419cbfee4f16f1129df3548add598c77bc61dfd8e2edfdb51","sha512":"8b2e058abcb59d55d67300753c671610d3ed2a1e482a8423f8130089f048e67bb693eb69e04a65dce97163068bf15734e3046ab7d6c188733245dfdca15fab61","ssdeep":"384:KBR6ZqHCzkDY74zHpfqiKu/iFuSvuUACU2uy57:EwYDY7AvPiESvu3P2p57","tlshash":"9ea2435993c530d97abc33b2942e8318197902bbd016e04be869909d5f37dcad0e3e7a","first_seen":"2026-08-24T22:04:40.558652Z","last_seen":"2026-08-24T22:04:40.611911Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"garantibankasi.intengo.com/javascript/pikachoose.js","fqdn":"garantibankasi.intengo.com","domain":"intengo.com","tld":"com"},"ip":{"addr":"176.235.160.181","port":443,"asn":34984,"as":"Superonline Iletisim Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garantibankasi.intengo.com/login.intengo?cid=31880","date":"2026-08-24T22:04:03.053Z","timestamp":1787609043053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intengo.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 05 Nov 2025 07:02:50 GMT","end":"Mon, 07 Dec 2026 07:02:50 GMT"},"fingerprint":{"sha1":"96:A5:20:D9:33:C4:9E:E3:1C:13:A4:E5:ED:7A:C2:49:9D:6A:61:61","sha256":"C5:52:7C:6E:0E:8B:F7:2E:A6:8E:B1:4B:DE:BB:6B:11:2A:88:8C:6D:AF:9D:68:C4:24:5F:10:58:92:84:A5:52"}}},"request":{"raw":"GET /javascript/pikachoose.js HTTP/1.1\r\nHost: garantibankasi.intengo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://garantibankasi.intengo.com/login.intengo?cid=31880\r\nCookie: JSESSIONID=F52B1154DE0FE9A84757A92DEFF51A20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 24 Aug 2026 22:04:03 GMT\r\ncontent-type: text/javascript\r\ntransfer-encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\netag: W/\"10602-1787155812000\"\r\nlast-modified: Wed, 19 Aug 2026 16:10:12 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10602,"size_decoded":3761,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"55430fdbe17891bfd8faf57532496940","sha1":"f05419899ad751d37b959bd6e57623dc7ecb082d","sha256":"f75f65188e3b0a185dd4ba3540bf78affc87503f7e9c700c501e9087f015d9fd","sha512":"94ca3d2c8e8eb0acf9d0651822974e41fdfe01c0db18654e4d4a7e46286f76dfe7972c08b9c4da9f7a14cf97cd7b951e16539d6d9b09b61726796bf894148d07","ssdeep":"96:tN26crgMuPZNVhjkOBDiyzX/jL+mJOIBQC0moDQtGoCUUQ4xnYrp2ydV6zYaW2Le:t7dvAaaSBooChxnep2y+86noAEL","tlshash":"41227399e70c62ffd0f310a6b73f01e9787ec2311405a75a3f1ee65c19a094582bb9b8","first_seen":"2026-08-24T22:04:40.574785Z","last_seen":"2026-08-24T22:04:40.612579Z","times_seen":2,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-24","alert":"Phishing Block","trigger":"garantibankasi.intengo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"garantibankasi.intengo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}