{"type":"bundle","id":"bundle--412e872a-855f-482d-b42d-69451d2b0444","spec_version":"2.1","objects":[{"type":"identity","spec_version":"2.1","id":"identity--1899c588-955e-4b09-b889-9238ee80ebc5","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Cyber Threat Intelligence","description":"Oltanom Milli Oltalama ve Sahtecilik Erken Uyarı Platformu Tehdit İstihbarat Beslemesi","identity_class":"organization","sectors":["cybersecurity","financial-services","telecommunications"],"contact_information":"https://oltanom.com/istihbarat-api"},{"type":"indicator","spec_version":"2.1","id":"indicator--e04561b6-17dd-4e50-a5f0-342d8abd157c","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: evimhemen.net","description":"Bu site güvenlik sistemimiz tarafından kara listeye alınmıştır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'evimhemen.net']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee64166-4ab9-4437-aa53-75aa159e6f89","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: akraantalyafrontdesk.com","description":"Bu site, T.C. Siber Güvenlik Başkanlığı tarafından resmi olarak dolandırıcılık, oltalama (phishing) veya siber tehdit amacıyla engellenmiş bağlantılar listesinde yer almaktadır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akraantalyafrontdesk.com']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c858b2-0cb4-44de-bf25-f3414ce0702b","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: suratkargotakip.com","description":"DİKKAT: Site içeriği güvenlik mekanizması veya erişim kısıtlaması nedeniyle analiz edilemedi. Ancak alan adı yapısı (suratkargotakip.com) ve bağımsız güvenlik sinyalleri ciddi dolandırıcılık/oltalama riski göstermektedir. Kesinlikle kart veya kimlik bilgisi girmeyiniz.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'suratkargotakip.com']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--60d4c905-4f6e-41c9-875a-daf29b92cfcf","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: kaya-shop.com.tr","description":"Bu sitenin sunucusuna teknik nedenlerle (HEADLESS_UNAVAILABLE) tam erişilememiştir. Sitenin güvenli olduğu teyit edilememiştir; tanımadığınız bağlantılara kişisel veri girmeyiniz.","indicator_types":["anomalous-activity"],"pattern":"[domain-name:value = 'kaya-shop.com.tr']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--62eb83d9-658f-42cf-b79a-ae5f9adcc0e2","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: odeme-ilantr.online","description":"Bu site, T.C. Siber Güvenlik Başkanlığı tarafından resmi olarak dolandırıcılık, oltalama (phishing) veya siber tehdit amacıyla engellenmiş bağlantılar listesinde yer almaktadır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'odeme-ilantr.online']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--6e72d0e2-7575-4471-9530-c79e6446007e","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: garantibbva.my-board.org","description":"Bu site, T.C. Siber Güvenlik Başkanlığı tarafından resmi olarak dolandırıcılık, oltalama (phishing) veya siber tehdit amacıyla engellenmiş bağlantılar listesinde yer almaktadır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'garantibbva.my-board.org']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e8c2b7-542e-452e-8810-d50e727c4beb","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: ekamu.org","description":"Bu site, T.C. Siber Güvenlik Başkanlığı tarafından resmi olarak dolandırıcılık, oltalama (phishing) veya siber tehdit amacıyla engellenmiş bağlantılar listesinde yer almaktadır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ekamu.org']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--df324809-41b8-4aae-b61b-f526d9db65f7","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: voltaonline.co","description":"Bu site, T.C. Siber Güvenlik Başkanlığı tarafından resmi olarak dolandırıcılık, oltalama (phishing) veya siber tehdit amacıyla engellenmiş bağlantılar listesinde yer almaktadır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'voltaonline.co']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--5b31b80f-bc16-4f92-a84d-ef619f7b78b5","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: masaksorgu.net","description":"Bu site, T.C. Siber Güvenlik Başkanlığı (eski adıyla USOM) tarafından resmi olarak dolandırıcılık, oltalama (phishing) veya siber tehdit amacıyla engellenmiş bağlantılar listesinde yer almaktadır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'masaksorgu.net']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--00e60f68-ea25-4c07-aaa1-8f21d5c712f7","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: kuvings.com.tr","description":"Bu site yasal mevzuat gereksinimleri veya müşteri şikayet seviyeleri nedeniyle dikkatle incelenmelidir.","indicator_types":["anomalous-activity"],"pattern":"[domain-name:value = 'kuvings.com.tr']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"observed-data","spec_version":"2.1","id":"observed-data--a72c088d-eed8-4ba1-8002-d5de7641c849","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","first_observed":"2026-10-08T05:51:48.603Z","last_observed":"2026-10-08T05:51:48.603Z","number_observed":1,"objects":{"0":{"type":"domain-name","value":"kuvings.com.tr"}}},{"type":"malware","spec_version":"2.1","id":"malware--684253a7-1a0a-4aa5-9b4c-f1e5ad2b7850","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Data Exfiltration Channel: FORM_PHISHING_GATE_SCRIPT","description":"Form bilinen bir phishing veri toplama scriptine post ediliyor: https://kuvings.com.tr/wp-comments-post.php","malware_types":["spyware","data-theft"],"is_family":false},{"type":"relationship","spec_version":"2.1","id":"relationship--c13c77a8-d137-4d51-99d7-2e29e9c8ece4","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","relationship_type":"indicates","source_ref":"indicator--00e60f68-ea25-4c07-aaa1-8f21d5c712f7","target_ref":"malware--684253a7-1a0a-4aa5-9b4c-f1e5ad2b7850"},{"type":"indicator","spec_version":"2.1","id":"indicator--deec2bfa-4aa2-4f9c-9f29-93aa02e20a7a","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: floreanaturals.site","description":"Bu web sitesi yapay zeka/otomatik finansal getiri vaatleri ve sahte haber şablonları ile kullanıcıların telefon ve kart bilgilerini toplamayı hedefleyen yüksek riskli sahte yatırım dolandırıcılığı (cloaker) sitesidir.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'floreanaturals.site']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"observed-data","spec_version":"2.1","id":"observed-data--00c457c5-b7b0-4006-a7e3-48b1ef6fa5e7","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","first_observed":"2026-10-08T05:51:48.603Z","last_observed":"2026-10-08T05:51:48.603Z","number_observed":1,"objects":{"0":{"type":"domain-name","value":"floreanaturals.site"}}},{"type":"indicator","spec_version":"2.1","id":"indicator--527c4b1f-f774-47f0-b0b2-a36047bedd22","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: impectorinternational.com","description":"Bu site alışveriş ve işlemler için yüksek oranda dolandırıcılık veya veri hırsızlığı sinyalleri taşımaktadır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'impectorinternational.com']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--f31cfc68-1135-4b33-9d6d-99896010fc0f","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: ziraatdinamik.site","description":"DİKKAT: Site içeriği güvenlik mekanizması veya erişim kısıtlaması nedeniyle analiz edilemedi. Ancak alan adı yapısı (ziraatdinamik.site) ve bağımsız güvenlik sinyalleri ciddi dolandırıcılık/oltalama riski göstermektedir. Kesinlikle kart veya kimlik bilgisi girmeyiniz.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ziraatdinamik.site']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--a13850de-a1fd-4146-b4f0-f6091e9fbb9a","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: ziraatdinamikbanka.site","description":"DİKKAT: Site içeriği güvenlik mekanizması veya erişim kısıtlaması nedeniyle analiz edilemedi. Ancak alan adı yapısı (ziraatdinamikbanka.site) ve bağımsız güvenlik sinyalleri ciddi dolandırıcılık/oltalama riski göstermektedir. Kesinlikle kart veya kimlik bilgisi girmeyiniz.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ziraatdinamikbanka.site']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"indicator","spec_version":"2.1","id":"indicator--32664978-012f-49ed-bda6-3adb0b0f23c5","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: magnesiumcreamtr.com","description":"Bu site iletişim ve müşteri hizmetleri eksikliği nedeniyle dikkatle incelenmelidir.","indicator_types":["anomalous-activity"],"pattern":"[domain-name:value = 'magnesiumcreamtr.com']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"observed-data","spec_version":"2.1","id":"observed-data--a688cac1-508a-4067-9793-fc4c1f2ac0de","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","first_observed":"2026-10-08T05:51:48.603Z","last_observed":"2026-10-08T05:51:48.603Z","number_observed":1,"objects":{"0":{"type":"domain-name","value":"magnesiumcreamtr.com"}}},{"type":"indicator","spec_version":"2.1","id":"indicator--fdb993cd-af6b-4f9f-921a-8975fa883594","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: callusremovertr.com","description":"Bu site alışveriş ve işlemler için yüksek oranda dolandırıcılık veya veri hırsızlığı sinyalleri taşımaktadır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'callusremovertr.com']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"},{"type":"observed-data","spec_version":"2.1","id":"observed-data--480e4c13-1d1f-4174-96c6-5aea7c7b7964","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","first_observed":"2026-10-08T05:51:48.603Z","last_observed":"2026-10-08T05:51:48.603Z","number_observed":1,"objects":{"0":{"type":"domain-name","value":"callusremovertr.com"}}},{"type":"indicator","spec_version":"2.1","id":"indicator--95662c4a-9a1e-40cf-8162-3c9b440a8e04","created":"2026-10-08T05:51:48.603Z","modified":"2026-10-08T05:51:48.603Z","name":"Oltanom Threat Indicator: pudulee.xyz","description":"Bu site güvenlik sistemimiz tarafından kara listeye alınmıştır.","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pudulee.xyz']","pattern_type":"stix","valid_from":"2026-10-08T05:51:48.603Z","confidence":80,"created_by_ref":"identity--1899c588-955e-4b09-b889-9238ee80ebc5"}]}