{"report_id":"f7c3a112-7902-4af8-955b-c307b116cb7c","version":0,"status":"done","tags":["microsoft","phishing"],"date":"2026-07-21T00:16:38Z","url":{"schema":"http","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"title":"Outlook","dom":{"size":55818,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10412)","md5":"46c69d9059c7948e74d26d0132fba17d","sha1":"c98b081a90298f00dfb391c48a6e41230c41318b","sha256":"faab15dd1436eacbd3b682db2caa047fa7432c4854406b40d92dcfb8dd46511b","sha512":"5ae6ea54ddae6026992fc1549beaed186bf786a2aedacd3d41ece83cb1bc1c1ba4c94d19beb6b0195b6bcce778ec8873153e39a2dcfa5d23fdcf0887380e1a72","ssdeep":"768:SyDwnmtz7e05Nnfv3aD2xakzdKV7aQblNoJmgK4e2Fuz1Qj91PcM:vtzK05NnaD2xaEkF5F4nFuIfcM","tlshash":"a943af3fa9972c223427607463ebb34a3b2e8417864ed924397c1718ef81d66417ebdd","dom_hash":"domhashf42d53fbf7615754fc3b4b156882f267","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T00:16:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"admimn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"admimn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"mail.akdeniz.edu.tr","ip":{"addr":"194.27.186.116","port":443,"asn":8517,"as":"National Academic Network and Information Center","country":"Türkiye","country_code":"TR"},"domain_registered":"2002-12-26","domain_rank":0,"first_seen":"2026-07-21T00:16:38.396551Z","last_seen":"2026-07-21T00:16:38.396552Z","alert_count":0,"request_count":4,"received_data":90867,"sent_data":2237,"comment":"","tags":null,"fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"admimn.com","ip":{"addr":"66.116.229.242","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-21T00:16:38.376142Z","last_seen":"2026-07-21T00:16:38.376142Z","alert_count":6,"request_count":2,"received_data":59912,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Outlook Web App:15.2.1544","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d50b8810551aaaf7196d920f3d9f7255","sha1":"97e8ed18ae95ccc7408d9e43e052477d5b6376ce","sha256":"c653b4758e25c7f86c794c56282cbe4a7ed1387e8f951220f18d80f06050c504","sha512":"8aab4ca23e1d30e5243b664c733b7490da0532b2020d5ad0537b740ddf0487f8d2ea6096e1d5310918cc04f62d1d75f0cbacb3b46f5286489ffbd0a52b8b2878","ssdeep":"384:Et8tz4HAo99QeRwiWSM7iFi5NJsl8oWGixlk:Emtz7e05Nnfvg","tlshash":"7c52a43dbc9d18321973b239075fb28af3668917930cdd143c2e93a4bf0056685bead6","size":13833,"data":"","first_seen":"2026-07-21T00:16:42.650812Z","last_seen":"2026-07-21T06:40:34.074536Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9adcf056d9c25cf9f690ea2498349071","sha1":"d13101da5f0bca42590b74121eb1c05d791e34e5","sha256":"12a7599e5ad3025a4a4fd6550acce44921765bb6d45484f9d5ccdce694122216","sha512":"b36d9b2ec97c4f04634fe2befcc95438035e2039cdfc367496a93d73e5534880f1eb0077ea4759a91d607b0dfeb2b3b39a819abe7f3de536fe60cd05abca71d7","ssdeep":"","tlshash":"3b219a8de1151337b41d8d37d6da815577fd4e37d11cec08e08c047a248990d10b8437","size":1150,"data":"","first_seen":"2026-07-21T00:16:42.651924Z","last_seen":"2026-07-21T06:40:34.075139Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"277d7d8f80fcf95d75e6f34219032f39","sha1":"8bae1e1abfdaa85e65ac52590c4b6bfc8fce1d17","sha256":"5f7b471951bd064e4fa66c3db4964853d22942b68dd8b08388b840222d590f0b","sha512":"8a13f5fc43b67e1a099a888279accda931ac0e970403d13b4e4b5b31ae70cc741bd7a9cf31edd47f6dfe5507dcd8f9a0c27c0e4f6271b51f58be42951818cefd","ssdeep":"","tlshash":"c231b66a7447092079aef63d126b678c3939c017450699003e7cd61e6f36fc7c4a9e9e","size":1690,"data":"","first_seen":"2026-07-21T00:16:42.653018Z","last_seen":"2026-07-21T06:40:34.075775Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad8803023054cf250c976c18676885ef","sha1":"f3e0f65bdb69d2a1e2e855985b98a7f9e42f387f","sha256":"d83e913fa807f4aba671616421737a2cb21e6b60a8535942f7b4ef788afa9414","sha512":"05b60ec0a886bddbf81a07cdac2312a9f66603197d4a5c1c0001d7a8368039906c3222b2f143f40f1ea45162cc03def337f4c1facea57c84ab3038b893ea5040","ssdeep":"","tlshash":"b160000f030003c0f00fc00f0cc0003003300003c03c0c3000000030000000c0000030","size":13,"data":"","first_seen":"2026-06-07T17:13:44.781609Z","last_seen":"2026-07-22T18:22:18.735011Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8e77d81fa40b7d1003e9f017fccbd46","sha1":"010c94d0e5692f9007ddc4e5c88c910e3bc78f73","sha256":"1bd4c65265634b81bc08fa2c0ed8c99b6a8d6b4aca9d6d470927cb429b602511","sha512":"240315ac5a4cb3dd0394e397a70536ddd812533c6a16511b79999aaed7188513e83d9c8d86f4092c3cc98069c65d6602e573f7b6db5081d655db81a8042a4d4f","ssdeep":"","tlshash":"2fb0922a3b4206a40bb6f75d32df22013b42c0435f05b88cb87de102c7109c38878f4c","size":122,"data":"","first_seen":"2024-02-14T03:38:22Z","last_seen":"2026-07-22T18:22:18.73553Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mail.akdeniz.edu.tr/owa/auth/15.2.1544/themes/resources/segoeui-semilight.ttf","fqdn":"mail.akdeniz.edu.tr","domain":"akdeniz.edu.tr","tld":"edu.tr"},"ip":{"addr":"194.27.186.116","port":443,"asn":8517,"as":"National Academic Network and Information Center","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admimn.com/akdeniz.edu.tr.htm","date":"2026-07-21T00:16:10.931Z","timestamp":1784592970931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.akdeniz.edu.tr","organization":""},"issuer":{"commonName":"TUBITAK Kamu SM SSL Sertifika Hizmet Saglayicisi - Surum 3","organization":"TUBITAK Kamu Sertifikasyon Merkezi"},"validity":{"start":"Fri, 05 Jun 2026 12:45:30 GMT","end":"Sun, 20 Dec 2026 12:45:30 GMT"},"fingerprint":{"sha1":"50:53:E6:14:83:F2:9A:64:12:8A:0D:01:A0:10:CF:C8:3A:05:CD:11","sha256":"1D:0B:76:05:C4:5A:9D:3D:5A:DE:06:67:B1:8D:67:75:01:76:41:66:BC:09:8F:2C:13:D4:A6:55:23:57:EB:01"}}},"request":{"raw":"GET /owa/auth/15.2.1544/themes/resources/segoeui-semilight.ttf HTTP/1.1\r\nHost: mail.akdeniz.edu.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://admimn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://admimn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=2592000\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 21 Dec 2023 07:34:57 GMT\r\naccept-ranges: bytes\r\netag: \"80264632e033da1:0\"\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: d7491985-dbf2-453e-8ebf-190f28c1819d\r\nx-powered-by: ASP.NET\r\ndate: Tue, 21 Jul 2026 00:16:11 GMT\r\ncontent-length: 41560\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":16384,"size_decoded":16754,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"OS/2\"","md5":"13f9a92c446ba4429ef9660c094d2971","sha1":"969502496c84d8867a800287838a6280ffd83a5d","sha256":"40ae06bab172a899c482b5a939071538102666a3019de429d8472892a07b913a","sha512":"49a60ed7708da2d40a3c1d9e7219c8a703f672ae46d75656148f968c4dfd85771ddf0aba4d74857f4a8163132b045edd81afc7580691595ed7937f2f069e038a","ssdeep":"384:FF69hSPkeHMIz0Sw/Cmi1iQve+xMOCt+ZwTeGN/ZVc:FF6XesIz0ymUHmLg0e8E","tlshash":"5d728d8067937614f347a87c8ce89fe40ea37c071353970ff96e12ab8f8d1919a99249","first_seen":"2023-05-26T12:16:15Z","last_seen":"2026-07-21T04:16:59.720085Z","times_seen":63,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":79,"connect":78,"send":0,"wait":299,"receive":2,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.akdeniz.edu.tr/owa/auth/15.2.1544/themes/resources/favicon.ico","fqdn":"mail.akdeniz.edu.tr","domain":"akdeniz.edu.tr","tld":"edu.tr"},"ip":{"addr":"194.27.186.116","port":443,"asn":8517,"as":"National Academic Network and Information Center","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admimn.com/akdeniz.edu.tr.htm","date":"2026-07-21T00:16:11.250Z","timestamp":1784592971250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.akdeniz.edu.tr","organization":""},"issuer":{"commonName":"TUBITAK Kamu SM SSL Sertifika Hizmet Saglayicisi - Surum 3","organization":"TUBITAK Kamu Sertifikasyon Merkezi"},"validity":{"start":"Fri, 05 Jun 2026 12:45:30 GMT","end":"Sun, 20 Dec 2026 12:45:30 GMT"},"fingerprint":{"sha1":"50:53:E6:14:83:F2:9A:64:12:8A:0D:01:A0:10:CF:C8:3A:05:CD:11","sha256":"1D:0B:76:05:C4:5A:9D:3D:5A:DE:06:67:B1:8D:67:75:01:76:41:66:BC:09:8F:2C:13:D4:A6:55:23:57:EB:01"}}},"request":{"raw":"GET /owa/auth/15.2.1544/themes/resources/favicon.ico HTTP/1.1\r\nHost: mail.akdeniz.edu.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://admimn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=2592000\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 21 Dec 2023 08:15:38 GMT\r\naccept-ranges: bytes\r\netag: \"03139e1e533da1:0\"\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 202d8a01-774b-4a96-b0e4-56c71ab8dc46\r\nx-powered-by: ASP.NET\r\ndate: Tue, 21 Jul 2026 00:16:11 GMT\r\ncontent-length: 7886\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7886,"size_decoded":8242,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"759fade9033aa298629e4b000dcd6dde","sha1":"34a1adf5c7326d7bde5b5735471b5d81e611c189","sha256":"cf0808a61ec571e0c4975663903b288009d55502ac0445d9948983b339a5cf6e","sha512":"e96e93b13d70420d4d509d89a6337651440ae049b2a23d57c6250987003c46512c40c85c41bfa1c473a704801c961ffbe421522b89a1c34ba3b9e82a6d0769ed","ssdeep":"48:g8KokgDQoxTP0Vh0jV/H2kPxL6GUEtcrCOmgfzQumtGCzYoITin0iarrWtwVWsiw:97DdTGhGW6yS7Kvs/WjiUKqWmNQOWY","tlshash":"0cf130334afb6800e6171df04556f774c16a2d16394e58c3d88c3a6ae037be6706a9ef","first_seen":"2023-05-01T18:01:52Z","last_seen":"2026-07-22T18:22:18.729427Z","times_seen":5682,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":77,"send":0,"wait":78,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admimn.com/akdeniz.edu.tr.htm","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T00:16:09.401Z","timestamp":1784592969401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admimn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Jul 2026 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"92:D0:4A:6E:F8:6A:27:A0:A5:CE:26:BB:8A:34:2B:47:1E:4A:C2:E0","sha256":"EA:25:DF:89:F6:90:FD:A2:92:5B:FE:D2:5A:B7:1B:67:0F:65:D7:67:26:B2:5B:D1:98:5B:18:59:FB:B1:BA:27"}}},"request":{"raw":"GET /akdeniz.edu.tr.htm HTTP/1.1\r\nHost: admimn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 20 Jul 2026 06:19:27 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Tue, 21 Jul 2026 00:16:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Outlook Web App:15.2.1544","description":"Outlook on the web is an information manager web app. It includes a web-based email client, a calendar tool, a contact manager, and a task manager.","website":"https://help.outlook.com","common_platform_enumeration":"cpe:2.3:a:microsoft:outlook_web_access:*:*:*:*:*:*:*:*","icon":"Outlook.svg","categories":["Webmail"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":57582,"size_decoded":30278,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10414), with CRLF line terminators","md5":"e65263b968696d2431dbdc6f81e302dd","sha1":"7494de11cb3224eaca89ffc24e2eba7ca89894ce","sha256":"d92fa86d8a9ba2066f074e2d249bc057344481b6e173f3dd6a5a6669879d4eac","sha512":"6e64a0b741af901598b455e3a62257a217fb49c52677b70b8b2e1425d11adb9c1a321196fd5cca544b2eb774937180dea131540224bbbb3110704fa7f0e2fec7","ssdeep":"768:a39QS4/yR1GirLX9ciGwBzz+mUukRdKV7aQblHoJmgK4e2FuzPqLwXcQ:EGinX9cAzz+mhokF5r4nFu/cQ","tlshash":"92438e3fe806683727339625a7b3720aff1541074b4a8a2075fc1716afb1c79812aedd","first_seen":"2026-07-21T00:16:42.646229Z","last_seen":"2026-07-21T06:40:34.07152Z","times_seen":3,"resource_available":true,"data":null}},"time_used":966,"timings":{"blocked":0,"dns":297,"connect":133,"send":0,"wait":265,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"admimn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"admimn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"admimn.com/signin.png","fqdn":"admimn.com","domain":"admimn.com","tld":"com"},"ip":{"addr":"66.116.229.242","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admimn.com/akdeniz.edu.tr.htm","date":"2026-07-21T00:16:10.624Z","timestamp":1784592970624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admimn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 16 Jul 2026 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"92:D0:4A:6E:F8:6A:27:A0:A5:CE:26:BB:8A:34:2B:47:1E:4A:C2:E0","sha256":"EA:25:DF:89:F6:90:FD:A2:92:5B:FE:D2:5A:B7:1B:67:0F:65:D7:67:26:B2:5B:D1:98:5B:18:59:FB:B1:BA:27"}}},"request":{"raw":"GET /signin.png HTTP/1.1\r\nHost: admimn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://admimn.com/akdeniz.edu.tr.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 20 Jul 2026 06:15:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1899\r\ncontent-type: image/png\r\ndate: Tue, 21 Jul 2026 00:16:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1899,"size_decoded":2102,"mime_type":"image/png","magic":"PNG image data, 109 x 35, 8-bit/color RGBA, non-interlaced","md5":"24ed8a296cbe32922af34cd48ea80413","sha1":"dfbbcbc6fe26ab214cc2f864d43a51fafa4c3570","sha256":"8f326120ec44d6de44f97aafc65569b89c66e85925ce7c485a3fe57a005daebf","sha512":"42645044ff6c06b001d0cd879b306af4a9dd3e293168e6feb9c87111ca7a7f7f9a2fee12f33e68ee7e8848dda43de7d717a2b55a99a267e8942d13ff1216c3ea","ssdeep":"","tlshash":"a84119d50f813e39864da8f611d318b4fad2b1162de0a1ab3df7925058c9a8d2b5a362","first_seen":"2026-07-21T00:16:42.647366Z","last_seen":"2026-07-21T06:40:34.072018Z","times_seen":3,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"admimn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"admimn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mail.akdeniz.edu.tr/owa/auth/15.2.1544/themes/resources/segoeui-semibold.ttf","fqdn":"mail.akdeniz.edu.tr","domain":"akdeniz.edu.tr","tld":"edu.tr"},"ip":{"addr":"194.27.186.116","port":443,"asn":8517,"as":"National Academic Network and Information Center","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admimn.com/akdeniz.edu.tr.htm","date":"2026-07-21T00:16:10.933Z","timestamp":1784592970933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.akdeniz.edu.tr","organization":""},"issuer":{"commonName":"TUBITAK Kamu SM SSL Sertifika Hizmet Saglayicisi - Surum 3","organization":"TUBITAK Kamu Sertifikasyon Merkezi"},"validity":{"start":"Fri, 05 Jun 2026 12:45:30 GMT","end":"Sun, 20 Dec 2026 12:45:30 GMT"},"fingerprint":{"sha1":"50:53:E6:14:83:F2:9A:64:12:8A:0D:01:A0:10:CF:C8:3A:05:CD:11","sha256":"1D:0B:76:05:C4:5A:9D:3D:5A:DE:06:67:B1:8D:67:75:01:76:41:66:BC:09:8F:2C:13:D4:A6:55:23:57:EB:01"}}},"request":{"raw":"GET /owa/auth/15.2.1544/themes/resources/segoeui-semibold.ttf HTTP/1.1\r\nHost: mail.akdeniz.edu.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://admimn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://admimn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=2592000\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 21 Dec 2023 07:34:57 GMT\r\naccept-ranges: bytes\r\netag: \"80264632e033da1:0\"\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 0e65e068-ef16-4a4a-85a4-03a941aee383\r\nx-powered-by: ASP.NET\r\ndate: Tue, 21 Jul 2026 00:16:11 GMT\r\ncontent-length: 48952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":48952,"size_decoded":49322,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"LTSH\", 11 names, Microsoft, language 0x409, � 2011 Microsoft Corporation. All Rights Reserved.RegularSegoe UI SemiboldVersion 0.81 Build 161","md5":"06fef2219439f2317755635025452398","sha1":"a086789c88c8f114c558924fa21aafe2c2dc6ae1","sha256":"7b9400787c7c975567eccdf0ed21b55b27aceeaec3484a644ebe9421e55cd783","sha512":"dd363538c61ab6f6e2fd378d14e321b5d3929267f530c269ddfec43453d4c6c5595b0b65ebf2c589fb5be2decca57d26adbf7548f8ec924916ed4e1495517d43","ssdeep":"768:h6PZwAJsFLn9Qfuxwztw9lGITLzsGA/gtOLOXjLe3q4yg0SSFUWdBXwNBP7:iZwS2n9Qfu1lGMs8Eq4pStIl7","tlshash":"fc239e1b6397f70ef624b0f5f86167f201b1785403ea429f398e4467c28a67d86e5b07","first_seen":"2025-01-24T14:29:51.819317Z","last_seen":"2026-07-21T00:16:42.648466Z","times_seen":21,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":78,"connect":77,"send":0,"wait":114,"receive":0,"ssl":578},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.akdeniz.edu.tr/owa/auth/15.2.1544/themes/resources/segoeui-regular.ttf","fqdn":"mail.akdeniz.edu.tr","domain":"akdeniz.edu.tr","tld":"edu.tr"},"ip":{"addr":"194.27.186.116","port":443,"asn":8517,"as":"National Academic Network and Information Center","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admimn.com/akdeniz.edu.tr.htm","date":"2026-07-21T00:16:10.928Z","timestamp":1784592970928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.akdeniz.edu.tr","organization":""},"issuer":{"commonName":"TUBITAK Kamu SM SSL Sertifika Hizmet Saglayicisi - Surum 3","organization":"TUBITAK Kamu Sertifikasyon Merkezi"},"validity":{"start":"Fri, 05 Jun 2026 12:45:30 GMT","end":"Sun, 20 Dec 2026 12:45:30 GMT"},"fingerprint":{"sha1":"50:53:E6:14:83:F2:9A:64:12:8A:0D:01:A0:10:CF:C8:3A:05:CD:11","sha256":"1D:0B:76:05:C4:5A:9D:3D:5A:DE:06:67:B1:8D:67:75:01:76:41:66:BC:09:8F:2C:13:D4:A6:55:23:57:EB:01"}}},"request":{"raw":"GET /owa/auth/15.2.1544/themes/resources/segoeui-regular.ttf HTTP/1.1\r\nHost: mail.akdeniz.edu.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://admimn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://admimn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public,max-age=2592000\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 21 Dec 2023 07:34:58 GMT\r\naccept-ranges: bytes\r\netag: \"0bdde32e033da1:0\"\r\nserver: Microsoft-IIS/10.0\r\nrequest-id: 3ded719a-53f6-4fb8-b1ff-1212218f26cb\r\nx-powered-by: ASP.NET\r\ndate: Tue, 21 Jul 2026 00:16:11 GMT\r\ncontent-length: 56760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":16180,"size_decoded":16549,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"LTSH\"","md5":"51071a4f838182406bc043e632fbc06b","sha1":"1ba9ebe251d26f0680af30f466fc38caa2992019","sha256":"998c9a2f21d0384eae378ec7a3dfba04f3d1e13a13b2d4f094f1a0f847f91045","sha512":"17ff9a069c18f234f2df8461d069bdc0e08485b94091a83240a78d768594a3ee8cfee1807b171f7906688d251980eee6c377a971c08ba98a346069132612703f","ssdeep":"384:V69hSPpAnwAYQ8BPbrUhDiGhTcrZNOlrS:V6VwA2/UhWmTcrZslrS","tlshash":"ba727c6d8b0deb1fc87076b89ce6633b04a2b863474504a9ef8f1177ec1ca6582356dd","first_seen":"2026-07-21T00:16:42.649736Z","last_seen":"2026-07-21T00:16:42.649736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":82,"connect":76,"send":0,"wait":154,"receive":20,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}