# nesetbirlik.com — Neşet Birlik personal site homepage | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/nesetbirlik.com/
Machine-readable companion: https://phishdestroy.io/domain/nesetbirlik.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-11-01 03:14:34 UTC
- Last availability or vendor check: 2026-11-01 03:14:34 UTC
- Stored record updated: 2026-11-01 04:30:08 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 104.21.69.252
- Registrar in stored WHOIS data: Atak Domain
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2025-11-15 10:18:32 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a19518-31f2-76ec-b326-74f20f3d8957/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/nesetbirlik.com
- Certificate Transparency search: https://crt.sh/?q=%25.nesetbirlik.com
- Web Archive lookup: https://web.archive.org/web/*/https://nesetbirlik.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records the captured homepage of nesetbirlik.com, presenting itself as Neşet Birlik's personal site with articles and contact.

The captured page presents itself as Neşet Birlik's personal site, with a hero section headed "Birlikte büyümek" and a portrait beside it. The page states the site owner operates three Keller Williams offices in İzmir, and offers two buttons: "Konuşmaya davet et" to invite a conversation and "Yazıları oku" to read articles. A banner at the top offers to read the site in English.

The stored VirusTotal domain result reports 15 detections out of 92 engines. DNS8 reported "suspicious"; ESET reported "suspicious".
Package revision: 1b5d7fe5e01dfed678ec74c5a582fd59a6f52f943854566f5b9b38a9cd33338c
Text generated (not scan time): 2026-11-01 04:45:53
Reviewed evidence snapshot: {"domain":"nesetbirlik.com","screenshot_available":true,"page_title":"Neşet Birlik","original_meta_description":"Neşet Birlik'in kişisel sitesi: yazılar, özgeçmiş ve konuşma davetleri.","metadata_observed_on":"2026-11-01","virustotal":{"detections":15,"engines":92,"malicious":12,"suspicious":3,"retrieved_date":"2026-11-01","analysis_date":"2026-10-30","flagging_vendors":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T03:45:17Z","final_host":"nesetbirlik.com","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 15 detections out of 92 engines. DNS8 reported \"suspicious\"; ESET reported \"suspicious\".","page_paragraph_target_characters":516}
Source facts (timestamps as stored): {"record_id":1726566,"first_recorded_at":"2026-11-01 04:14:34","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":15,"denominator":92,"malicious":12,"suspicious":3,"vendors":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-30T07:25:39Z","checked_at":"2026-11-01 04:45:13","fetched_at":"2026-11-01T03:45:12Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":15,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-30 07:25:39","checked_at":"2026-11-01 04:45:13","fetched_at":"2026-11-01 03:45:13","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 04:45:14"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-01 04:30:45"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 04:14:34"}}

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a19518-31f2-76ec-b326-74f20f3d8957.png
  Captured: 2026-11-01 03:14:34 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a19518-31f2-76ec-b326-74f20f3d8957.png
  Captured: 2026-11-01 03:14:34 UTC
  Source report: https://urlscan.io/result/01a19518-31f2-76ec-b326-74f20f3d8957/
- URLScan · 2026-04-25: https://screenshots.phishdestroy.io/us/019dc36c-310c-721e-83da-c9c27d2a073a.png
  Captured: 2026-04-25 06:55:47 UTC
  Source report: https://urlscan.io/result/019dc36c-310c-721e-83da-c9c27d2a073a/
  SHA-256: 4a4697f6bf8e04eb88f48727552946ca2b9bcdefa0f2c9f52a4823fcfc85fe32
- URLScan · 2026-04-24: https://screenshots.phishdestroy.io/us/019dbfca-97dd-749b-ac6b-d9318fe64f3e.png
  Captured: 2026-04-24 14:00:25 UTC
  Source report: https://urlscan.io/result/019dbfca-97dd-749b-ac6b-d9318fe64f3e/
  SHA-256: 4a4697f6bf8e04eb88f48727552946ca2b9bcdefa0f2c9f52a4823fcfc85fe32
- URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a19518-3de6-71f8-946a-125ec9d2838b.png
  Captured: 2026-11-01 03:12:41 UTC
  Source report: https://urlscan.io/result/01a19518-3de6-71f8-946a-125ec9d2838b/
  SHA-256: 98d58227a31de1cd8482aae281a6d19df75350fb1d8f754cdfc34334abbd4429
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/32afdd5f-0e03-4f09-84f7-a1312fb52907.png
  Captured: 2026-11-01 03:45:17 UTC
  Source report: https://radar.cloudflare.com/scan/32afdd5f-0e03-4f09-84f7-a1312fb52907
  SHA-256: 660297fffef8f5233fde92c4946cfda433d6d7ee87e793421bba28bb85b62c33

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-01T03:25:16Z",
        "uuid": "01a19518-31f2-76ec-b326-74f20f3d8957",
        "scanned_at": "2026-11-01T03:12:40Z",
        "final_url": "https://nesetbirlik.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://nesetbirlik.com/",
                "from": "http://nesetbirlik.com/",
                "status": 307
            }
        ],
        "ip": "172.67.216.32",
        "domains": [
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "104.16.80.73",
            "172.67.216.32"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "www.linkedin.com"
        ],
        "doc_hash": "67d55ab756f46d1572b6d84cf25e353cff40ff8a2961880ed779555365cec11a",
        "script_hashes": [
            "727bdad6b03222c1440c6eaaa0e6c1c8906331ad1a03451089227fb4b4eb12b5",
            "c76b28528f181a8a955bd365f94c2c51d98efe8b0250be8ea8f7f32901d56555",
            "1a1552939fcbb5824c818fbd0c1cc8084d3aad3e2bd4fa637c76f566c49848d2",
            "4ebbdffa9282a03f5ca9071919e06e3e7b649edbe958fd1caf5b87cb95d374fc",
            "fee9a6bb9065991108ad05ec20b64fab975a2594b367739aefbcbb3d910a40ff"
        ],
        "globals": [
            "process",
            "__cfBeacon"
        ],
        "tls": {
            "san": [
                "nesetbirlik.com",
                "*.nesetbirlik.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "nesetbirlik.com",
            "protocol": "QUIC",
            "valid_to": "2027-01-03T11:43:13Z",
            "valid_from": "2026-10-05T10:43:16Z"
        },
        "domain_age_days": 1548,
        "apex_age_days": 1548,
        "tls_age_days": 26,
        "tls_valid_days": 90,
        "requests": 15,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 66,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000",
            "content-security-policy": "default-src 'self'; script-src 'self' 'sha256-ri0fwPGyFIVNfUSuqe6kgi5gTWHtzjvHMe04vahOcgY=' https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; i",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-01T03:45:34Z",
        "uuid": "32afdd5f-0e03-4f09-84f7-a1312fb52907",
        "scanned_at": "2026-11-01T03:45:17Z",
        "final_url": "https://nesetbirlik.com/",
        "status": 200,
        "history": [
            {
                "url": "https://nesetbirlik.com/",
                "status": 200
            }
        ],
        "dom_hash": "88c7e27747a6e9428069adcc30fb64db31f030f8c2386f39f82a9d1a8ae5741a",
        "doc_hash": "67d55ab756f46d1572b6d84cf25e353cff40ff8a2961880ed779555365cec11a",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "nesetbirlik.com",
                "type": "A",
                "value": "172.67.216.32"
            },
            {
                "name": "nesetbirlik.com",
                "type": "A",
                "value": "104.21.69.252"
            },
            {
                "name": "nesetbirlik.com",
                "type": "AAAA",
                "value": "2606:4700:3033::6815:45fc"
            },
            {
                "name": "nesetbirlik.com",
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:d820"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.27",
        "whois": {
            "registrar": "Atak Domain Bilgi Teknolojileri A.S.",
            "created": "2025-11-15T11:18:32Z",
            "updated": "2026-10-01T10:03:04Z",
            "expires": "2026-11-15T11:18:32Z",
            "nameservers": [
                "alex.ns.cloudflare.com",
                "lola.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-01T03:45:12Z",
        "analysis_at": "2026-10-30T07:25:39Z",
        "stats": {
            "timeout": 0,
            "harmless": 45,
            "malicious": 12,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "created": "2025-11-15T00:00:00Z",
        "updated": "2025-11-15T00:00:00Z",
        "first_seen": "2025-11-18T16:03:34Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "alex.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route1.mx.cloudflare.net",
                "priority": 44
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:d820"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:45fc"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "alex.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.69.252"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 include:_spf.mx.cloudflare.net ~all"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route2.mx.cloudflare.net",
                "priority": 86
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "lola.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.216.32"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "route3.mx.cloudflare.net",
                "priority": 95
            }
        ],
        "dns_at": "2026-10-30T07:25:54Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "nesetbirlik.com",
                "*.nesetbirlik.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "6837f8f618b2eda113eca98604584bc4",
            "sha256": "fbb5da71b59354340ee5b90dc86bea2136b85b52b826390495082ddb35f0c0e4",
            "subject": "nesetbirlik.com",
            "valid_to": "2027-01-03T11:43:13Z",
            "valid_from": "2026-10-05T10:43:16Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2026-11-15T11:18:32Z",
                "last changed": "2026-05-06T12:09:42Z",
                "registration": "2025-11-15T11:18:32Z",
                "registrar expiration": "2026-11-15T11:18:32Z",
                "last update of RDAP database": "2026-10-01T13:03:04Z"
            },
            "registrar": "Atak Domain",
            "registrar_iana_id": "1601"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-01T03:44:24Z",
        "mail_config": {
            "mx": [
                "route2.mx.cloudflare.net",
                "route3.mx.cloudflare.net",
                "route1.mx.cloudflare.net"
            ],
            "spf": "v=spf1 include:_spf.mx.cloudflare.net ~all",
            "dane": true,
            "spf_lookups": 1
        },
        "caa_records": {
            "domain": "nesetbirlik.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-11-01T03:07:16Z",
            "first": "2018-08-08T09:31:32Z",
            "changes": 7,
            "days_archived": 10,
            "scans_per_day": 0,
            "avg_page_bytes": 7049
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://nesetbirlik.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 26
        },
        "social_tags": {
            "ogUrl": "https://nesetbirlik.com/",
            "title": "Neşet Birlik",
            "ogType": "website",
            "ogImage": "https://nesetbirlik.com/og/default.jpg",
            "ogTitle": "Neşet Birlik",
            "ogSiteName": "Neşet Birlik",
            "description": "Neşet Birlik'in kişisel sitesi: yazılar, özgeçmiş ve konuşma davetleri.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://nesetbirlik.com/",
            "ogDescription": "Neşet Birlik'in kişisel sitesi: yazılar, özgeçmiş ve konuşma davetleri."
        },
        "trackers": {
            "requests": 12
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 22,
                "wait": 289,
                "connect": 25,
                "download": 1
            },
            "response_ms": 339
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 31577,
            "co2_grams": 0.0012,
            "cleaner_than": 47
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.58.132",
                    "host": "lola.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.193.100",
                    "host": "alex.ns.cloudflare.com"
                }
            ],
            "zone": "nesetbirlik.com"
        },
        "location": {
            "ip": "2606:4700:3033::6815:45fc",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "nesetbirlik.com"
        },
        "dns": {
            "A": [
                "172.67.216.32",
                "104.21.69.252"
            ],
            "MX": [
                "{\"exchange\": \"route2.mx.cloudflare.net\", \"priority\": 86}",
                "{\"exchange\": \"route3.mx.cloudflare.net\", \"priority\": 95}",
                "{\"exchange\": \"route1.mx.cloudflare.net\", \"priority\": 44}"
            ],
            "NS": [
                "lola.ns.cloudflare.com",
                "alex.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"alex.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416686446, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "v=spf1 include:_spf.mx.cloudflare.net ~all"
            ],
            "AAAA": [
                "2606:4700:3033::6815:45fc",
                "2606:4700:3030::ac43:d820"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "default-src 'self'; script-src 'self' 'sha256-ri0fwPGyFIVNfUSuqe6kgi5gTWHtzjvHMe04vahOcgY=' https://challenges.cloudflar",
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3033::6815:45fc",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://nesetbirlik.com"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.linkedin.com/in/nesetbirlik"
            ],
            "external_count": 1,
            "internal_count": 14
        },
        "whois": {
            "registrar": "Atak Domain Bilgi Teknolojileri A.S.",
            "created": "2025-11-15T11:18:32Z",
            "updated": "2026-10-01T10:03:04Z",
            "expires": "2026-11-15T11:18:32Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "alex.ns.cloudflare.com",
                "lola.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000",
                "content-security-policy": "default-src 'self'; script-src 'self' 'sha256-ri0fwPGyFIVNfUSuqe6kgi5gTWHtzjvHMe04vahOcgY=' https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://cloudflareinsights.com; frame-src h",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```