SiberKapan Phishing URL Feed SiberKapan Phishing URL Feed

SiberKapan'in kendi sensorlerinden, gercek zamanli olarak uretilen oltalama domain listesi. Ucuncu taraf bir kaynaktan alinmiyor - Certificate Transparency loglarini canli izleyerek ve honeypot ag trafigini analiz ederek dogrudan SiberKapan'in kendisi tarafindan tespit ediliyor. A real-time phishing domain list generated directly from SiberKapan's own sensors. Not sourced from a third party — detected live by monitoring Certificate Transparency logs and analyzing honeypot network traffic.

⚡ Kaynak: SiberKapan CertStream Motoru + HoneypotKapan Sensorleri (kendi altyapimiz) Source: SiberKapan CertStream Engine + HoneypotKapan Sensors (our own infrastructure)

8820 Toplam Kayit Total Records

8820 CertStream Tespiti CertStream Detections

0 Honeypot Tespiti Honeypot Detections

Bu Feed Neden Farkli? Why This Feed Is Different

Statik bir liste degil - surekli calisan bir tespit motoru. Not a static list — a continuously running detection engine.

⏱

Site Acilmadan Once Yakalar Catches Before The Site Even Goes Live

Bir oltalama sitesi icin SSL sertifikasi cikartildigi an (yayina girmeden once) tespit edilir. Klasik listeler ancak kurban sikayeti sonrasi domain'i ekler - biz saniyeler icinde goruruz. Detected the moment an SSL certificate is issued for a phishing site — often before it even goes live. Traditional lists only add a domain after a victim complaint; we see it within seconds.

🔍

Sadece Marka Adi Degil, Niyet Tespiti Detects Intent, Not Just Brand Names

"ziraat-giris.com" gibi bariz orneklerin yaninda, "bireyselsube.xyz" veya "hgsyukle.com" gibi marka adi icermeyen ama Turk kullanicilarini hedef alan jenerik oltalama kaliplarini da yakalayan bir motor. Beyond obvious cases like "ziraat-giris.com", also catches generic phishing patterns targeting Turkish users that don't contain a brand name at all, like "bireyselsube.xyz" or "hgsyukle.com".

✂

Yazim Hatalarini da Yakalar Catches Deliberate Typos Too

Saldirganlarin filtrelerden kacmak icin kasitli yaptigi tek harflik yazim hatalarini (orn. "plaka" yerine "pleka") tespit eden bulanik eslesme (fuzzy matching) katmani. A fuzzy-matching layer that detects deliberate single-character typos attackers use to evade filters (e.g. "pleka" instead of "plaka").

✅

Kalite Kontrolu Quality Controlled

Yuksek guvenilirlikli tespitler otomatik onaylanir; belirsiz olanlar insan gozden gecirmesi icin bekletilir. Yanlis alarm oranini surekli dusuk tutmak icin motor duzenli olarak ayarlanir. High-confidence detections auto-approve; ambiguous ones wait for human review. The engine is continuously tuned to keep the false-positive rate low.

🏆

Gercek ornek: garantibbvabankası.ph domain'i SiberKapan tarafindan tespit edildiginde USOM'un resmi listesinde henuz yer almiyordu - marka adi eslesmesi ve alisilmadik bir TLD (.ph) kombinasyonu ile yakalandi. Real example: garantibbvabankası.ph was not yet present in USOM's official list when SiberKapan detected it — caught via brand-name matching combined with an unusual TLD (.ph).

Feed Listeleri Feed Lists

İhtiyacınıza uygun filtrelenmiş feed'ler. Filtered feeds tailored to your needs.

Feed Feed Kayıt Records Format İşlem Actions

Tum SiberKapan Kayitlari CertStream + Honeypot, tum kritiklik seviyeleri

8.820

TXT

👁 Goruntule View JSON

Sadece Domain'ler URL'ler haric, sadece domain kayitlari

8.820

TXT

👁 Goruntule View JSON

Kritiklik >= 3 Orta-yuksek kritiklik domain'ler

8.820

TXT

👁 Goruntule View JSON

Kritiklik >= 4 (Onerilir) Yuksek guvenilirlik - FortiGate icin onerilir

8.820

TXT

👁 Goruntule View JSON

🔌 API Kullanımı API Usage

Tum feed'ler query parametreleri ile filtrelenebilir: All feeds can be filtered via query parameters:

      # Sadece domain'ler, kritiklik >= 4

      curl https://siberkapan.org/domains/siberkapan/txt?type=domain&min_criticality=4

      # JSON formatinda

      curl https://siberkapan.org/domains/siberkapan/json?limit=10000