{"id":486,"date":"2026-01-18T20:06:32","date_gmt":"2026-01-18T20:06:32","guid":{"rendered":"https:\/\/narhost.com\/blog\/?p=486"},"modified":"2026-09-11T15:01:16","modified_gmt":"2026-09-11T15:01:16","slug":"domain-spoofing-nedir","status":"publish","type":"post","link":"https:\/\/narhost.com\/blog\/domain-spoofing-nedir\/","title":{"rendered":"Domain Spoofing Nedir, Alan Ad\u0131 Taklidinden Nas\u0131l Korunulur"},"content":{"rendered":"<div id=\"ai-ozet\" class=\"ai-box\">\n<p class=\"ai-box-title\">K\u0131saca \u00f6zet<\/p>\n<ul>\n<li>Domain spoofing nedir sorusunun k\u0131sa cevab\u0131: bir alan ad\u0131n\u0131n ya da g\u00f6nderen adresinin sahibiymi\u015f gibi g\u00f6sterilerek kar\u015f\u0131 taraf\u0131n kand\u0131r\u0131lmas\u0131d\u0131r.<\/li>\n<li>\u0130ki ana bi\u00e7imi var: g\u00f6nderen adresinin do\u011frudan taklidi (e-posta spoofing) ve g\u00f6ze benzer g\u00f6r\u00fcnen ikinci bir alan ad\u0131n\u0131n kaydedilmesi.<\/li>\n<li>SPF, DKIM ve DMARC \u00fc\u00e7l\u00fcs\u00fc g\u00f6r\u00fcnen g\u00f6nderen adresinin taklidini engeller; ba\u015fka bir alan ad\u0131ndan gelen benzer g\u00f6r\u00fcn\u00fcml\u00fc e-postay\u0131 engellemez.<\/li>\n<li>DMARC politikas\u0131 tek ad\u0131mda reject yap\u0131lmaz; none ile ba\u015flan\u0131r, raporlar okunur, quarantine \u00fczerinden reject&#8217;e ge\u00e7ilir.<\/li>\n<li>Benzer yaz\u0131ml\u0131 alan adlar\u0131n\u0131 savunma ama\u00e7l\u0131 kaydetmek, marka ad\u0131n\u0131n en \u00e7ok kar\u0131\u015ft\u0131r\u0131lan \u00fc\u00e7 d\u00f6rt varyant\u0131yla s\u0131n\u0131rl\u0131 tutuldu\u011funda makul maliyetlidir.<\/li>\n<li>Teknik kay\u0131tlar tek ba\u015f\u0131na yetmez; \u00f6deme ve banka bilgisi de\u011fi\u015fikli\u011fi taleplerinde ikinci kanaldan do\u011frulama \u015fartt\u0131r.<\/li>\n<\/ul>\n<\/div>\n<p>Muhasebe departman\u0131na genel m\u00fcd\u00fcr\u00fcn adresinden bir e-posta d\u00fc\u015f\u00fcyor, acil bir \u00f6deme isteniyor ve IBAN de\u011fi\u015fmi\u015f. Adres do\u011fru g\u00f6r\u00fcn\u00fcyor, imza do\u011fru g\u00f6r\u00fcn\u00fcyor, \u00fcslup bile tan\u0131d\u0131k. G\u00f6nderen adresinin taklit edilmesi ya da bir harfi de\u011fi\u015ftirilmi\u015f ikiz bir alan ad\u0131 kullan\u0131lmas\u0131, kurumsal doland\u0131r\u0131c\u0131l\u0131\u011f\u0131n en yayg\u0131n giri\u015fidir. Domain spoofing nedir, hangi bi\u00e7imlerde kar\u015f\u0131n\u0131za \u00e7\u0131kar ve alan ad\u0131n\u0131z\u0131 bu t\u00fcr k\u00f6t\u00fcye kullan\u0131mlara kar\u015f\u0131 nas\u0131l kapat\u0131rs\u0131n\u0131z, bu yaz\u0131da s\u0131ras\u0131yla anlat\u0131yoruz.<\/p>\n<h2>Domain spoofing nedir ve sald\u0131rgan\u0131n i\u015fine nas\u0131l yarar?<\/h2>\n<p>Domain spoofing nedir sorusunun teknik kar\u015f\u0131l\u0131\u011f\u0131 \u015fudur: bir iletinin ya da adresin, size ait olmayan bir alan ad\u0131ndan geliyormu\u015f gibi sunulmas\u0131d\u0131r. Kurban\u0131n g\u00f6rd\u00fc\u011f\u00fc isim ger\u00e7ektir; arkas\u0131ndaki kaynak de\u011fildir.<\/p>\n<p>Sald\u0131rgan\u0131n kazanc\u0131 g\u00fcvendir. Bilmedi\u011fi bir adresten gelen \u00f6deme talebine kimse itibar etmez, ama on y\u0131ld\u0131r \u00e7al\u0131\u015ft\u0131\u011f\u0131 tedarik\u00e7inin adresinden gelen bir fatura d\u00fczeltmesine itibar eder. Alan ad\u0131 burada bir kimlik belgesidir ve e-posta protokol\u00fc, o belgeyi kendili\u011finden do\u011frulamaz. SMTP tasarland\u0131\u011f\u0131nda g\u00f6nderen adresinin do\u011frulu\u011funu denetleyen bir mekanizma yoktu; bug\u00fcn kulland\u0131\u011f\u0131m\u0131z SPF, DKIM ve DMARC kay\u0131tlar\u0131 sonradan eklenen yamalard\u0131r.<\/p>\n<div class=\"highlight-box\">\n<p class=\"label\">Bilgi<\/p>\n<p>Alan ad\u0131 taklidi yaln\u0131zca e-postayla s\u0131n\u0131rl\u0131 de\u011fildir. Benzer yaz\u0131ml\u0131 bir alan ad\u0131 \u00fczerine kurulan sahte giri\u015f sayfalar\u0131, \u00e7al\u0131nan parolalarla devam eden oturum a\u00e7ma denemelerine kap\u0131 a\u00e7ar. Parola taraf\u0131ndaki sald\u0131r\u0131 bi\u00e7imini <a href=\"https:\/\/narhost.com\/blog\/brute-force-nedir\/\" title=\"Brute force sald\u0131r\u0131s\u0131 nedir ve nas\u0131l engellenir\">brute force yaz\u0131m\u0131zda<\/a> ayr\u0131ca ele ald\u0131k.<\/p>\n<\/div>\n<figure class=\"nh-sema\"><img loading=\"lazy\" src=\"https:\/\/narhost.com\/blog\/wp-content\/uploads\/2026\/09\/domain-spoofing-nedir-sema-narhost.webp\" alt=\"Domain spoofing nedir sorusunun savunma \u015femas\u0131 \u2014 SPF, DKIM ve DMARC ile kademeli koruma ad\u0131mlar\u0131\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Domain spoofing nedir sorusunun pratik kar\u015f\u0131l\u0131\u011f\u0131: kaynaklar\u0131 \u00e7\u0131kar, kay\u0131tlar\u0131 tamamla, politikay\u0131 kademeli s\u0131k\u0131la\u015ft\u0131r, varyantlar\u0131 izle.<\/figcaption><\/figure>\n<h2>Alan ad\u0131 taklidinin \u00fc\u00e7 bi\u00e7imi<\/h2>\n<p>Savunmay\u0131 do\u011fru kurmak i\u00e7in hangi bi\u00e7imle kar\u015f\u0131 kar\u015f\u0131ya oldu\u011funuzu ay\u0131rt etmek gerekir, \u00e7\u00fcnk\u00fc \u00fc\u00e7\u00fc farkl\u0131 yerlerden durdurulur. A\u015fa\u011f\u0131daki tablo, sald\u0131r\u0131 t\u00fcr\u00fcn\u00fc, ne \u00fczerine kuruldu\u011funu ve kar\u015f\u0131l\u0131\u011f\u0131nda hangi savunman\u0131n i\u015fe yarad\u0131\u011f\u0131n\u0131 \u00f6zetliyor.<\/p>\n<table>\n<thead>\n<tr>\n<th>Sald\u0131r\u0131 t\u00fcr\u00fc<\/th>\n<th>Nas\u0131l \u00e7al\u0131\u015f\u0131r<\/th>\n<th>Savunma<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>E-posta spoofing<\/td>\n<td>\u0130letide g\u00f6r\u00fcnen g\u00f6nderen adresi sizin alan ad\u0131n\u0131zla yaz\u0131l\u0131r, ileti ba\u015fka bir sunucudan \u00e7\u0131kar<\/td>\n<td>SPF, DKIM ve reject seviyesinde DMARC<\/td>\n<\/tr>\n<tr>\n<td>Typosquatting<\/td>\n<td>Harf d\u00fc\u015fmesi, harf de\u011fi\u015fmesi ya da uzant\u0131 de\u011fi\u015fikli\u011fiyle benzer bir alan ad\u0131 kaydedilir<\/td>\n<td>Savunma ama\u00e7l\u0131 kay\u0131t, marka izleme, al\u0131c\u0131 taraf\u0131nda g\u00f6r\u00fcnen ad uyar\u0131s\u0131<\/td>\n<\/tr>\n<tr>\n<td>IDN homograf<\/td>\n<td>Latin harfine g\u00f6rsel olarak benzeyen farkl\u0131 alfabe karakterleriyle alan ad\u0131 kurulur<\/td>\n<td>Taray\u0131c\u0131 punycode uyar\u0131lar\u0131, kurumsal e-posta filtresinde karakter seti kural\u0131<\/td>\n<\/tr>\n<tr>\n<td>G\u00f6r\u00fcnen ad taklidi<\/td>\n<td>Adres tamamen yabanc\u0131d\u0131r, yaln\u0131zca g\u00f6nderen ad\u0131 y\u00f6neticinizin ad\u0131yla doldurulur<\/td>\n<td>D\u0131\u015f g\u00f6nderen etiketi, \u00e7al\u0131\u015fan fark\u0131ndal\u0131\u011f\u0131, ikinci kanaldan do\u011frulama<\/td>\n<\/tr>\n<tr>\n<td>Alt alan ad\u0131 istismar\u0131<\/td>\n<td>Terk edilmi\u015f bir alt alan ad\u0131 kayd\u0131 \u00fc\u00e7\u00fcnc\u00fc tarafa y\u00f6nlendirilmi\u015f h\u00e2lde b\u0131rak\u0131l\u0131r<\/td>\n<td>DNS kay\u0131tlar\u0131n\u0131n d\u00fczenli temizli\u011fi, kullan\u0131lmayan CNAME kay\u0131tlar\u0131n\u0131n silinmesi<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u0130lk sat\u0131r d\u0131\u015f\u0131ndaki hi\u00e7bir sald\u0131r\u0131 bi\u00e7imi sizin alan ad\u0131n\u0131z\u0131 kullanmaz. Bu ayr\u0131m \u00f6nemlidir: e-posta kimlik do\u011frulama kay\u0131tlar\u0131n\u0131z kusursuz olsa bile, bir harfi de\u011fi\u015ftirilmi\u015f ba\u015fka bir alan ad\u0131ndan \u00e7\u0131kan iletiyi sizin kay\u0131tlar\u0131n\u0131z durduramaz. O taraf\u0131n savunmas\u0131 izleme ve fark\u0131ndal\u0131kt\u0131r.<\/p>\n<h2>SPF, DKIM ve DMARC neyi engeller?<\/h2>\n<p>\u00dc\u00e7 kay\u0131t birbirinin yerine ge\u00e7mez, birbirini tamamlar. SPF, alan ad\u0131n\u0131z ad\u0131na e-posta g\u00f6ndermeye yetkili sunucular\u0131n listesidir; al\u0131c\u0131 sunucu, iletinin bu listedeki bir adresten \u00e7\u0131k\u0131p \u00e7\u0131kmad\u0131\u011f\u0131na bakar. DKIM, giden iletiye sunucunuzun \u00f6zel anahtar\u0131yla imza ekler; al\u0131c\u0131, DNS&#8217;te yay\u0131nlad\u0131\u011f\u0131n\u0131z a\u00e7\u0131k anahtarla imzay\u0131 do\u011frular ve iletinin yolda de\u011fi\u015ftirilmedi\u011fini g\u00f6r\u00fcr.<\/p>\n<p>DMARC ise \u00fcstte durur ve iki soruyu sorar: SPF ya da DKIM ge\u00e7ti mi, ve ge\u00e7en kay\u0131t iletide g\u00f6r\u00fcnen g\u00f6nderen adresiyle ayn\u0131 alan ad\u0131na m\u0131 ait? \u0130kisi de olumluysa ileti kabul edilir. De\u011filse, al\u0131c\u0131 sunucuya ne yapmas\u0131 gerekti\u011fini yine sizin yay\u0131nlad\u0131\u011f\u0131n\u0131z DMARC politikas\u0131 s\u00f6yler. Kay\u0131tlar\u0131n s\u00f6z dizimi ve alan tan\u0131mlar\u0131 i\u00e7in <a href=\"https:\/\/dmarc.org\/overview\/\" title=\"DMARC resm\u00ee sitesi \u2014 protokol genel bak\u0131\u015f belgesi\" target=\"_blank\" rel=\"noopener\">dmarc.org genel bak\u0131\u015f sayfas\u0131<\/a> ve <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc7489.html\" title=\"RFC 7489 \u2014 DMARC protokol\u00fcn\u00fcn resm\u00ee tan\u0131m\u0131\" target=\"_blank\" rel=\"noopener\">RFC 7489 metni<\/a> birincil kaynakt\u0131r.<\/p>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>\u00dc\u00e7l\u00fcn\u00fcn engellemedi\u011fi \u015fey \u015fudur: sald\u0131rgan sizin alan ad\u0131n\u0131z\u0131 hi\u00e7 kullanmadan, benzer yaz\u0131ml\u0131 kendi alan ad\u0131n\u0131 kaydeder ve o alan ad\u0131 i\u00e7in kusursuz SPF, DKIM ve DMARC kay\u0131tlar\u0131 yay\u0131nlar. Kimlik do\u011frulama teknik olarak ge\u00e7er, \u00e7\u00fcnk\u00fc sald\u0131rgan ger\u00e7ekten o alan ad\u0131n\u0131n sahibidir. Bu iletiyi durduracak olan teknik kay\u0131t de\u011fil, al\u0131c\u0131n\u0131n dikkati ve kurumsal do\u011frulama s\u00fcrecidir.<\/p>\n<\/div>\n<h2>DMARC politikas\u0131 kademeli nas\u0131l s\u0131k\u0131la\u015ft\u0131r\u0131l\u0131r?<\/h2>\n<p>DMARC politikas\u0131n\u0131 do\u011frudan reject ile ba\u015flatmak, fark\u0131nda olmad\u0131\u011f\u0131n\u0131z me\u015fru g\u00f6nderim kaynaklar\u0131n\u0131 bir gecede susturur. Fatura sistemi, b\u00fclten servisi, CRM, i\u015fe al\u0131m yaz\u0131l\u0131m\u0131 ve destek paneli sizin alan ad\u0131n\u0131z ad\u0131na e-posta g\u00f6nderiyor olabilir. Do\u011fru s\u0131ra \u015fudur.<\/p>\n<p><strong>none a\u015famas\u0131.<\/strong> Politika hi\u00e7bir iletiyi engellemez, yaln\u0131zca rapor toplar. Bu a\u015famada ama\u00e7, alan ad\u0131n\u0131z ad\u0131na ger\u00e7ekte kimlerin g\u00f6nderim yapt\u0131\u011f\u0131n\u0131 eksiksiz \u00e7\u0131karmakt\u0131r. \u0130ki ile d\u00f6rt hafta aras\u0131 yeterli olur; ayl\u0131k fatura d\u00f6ng\u00fcs\u00fcn\u00fc kapsamas\u0131 i\u00e7in en az bir tam ay \u00f6nerilir.<\/p>\n<p><strong>quarantine a\u015famas\u0131.<\/strong> Do\u011frulamay\u0131 ge\u00e7emeyen iletiler spam klas\u00f6r\u00fcne d\u00fc\u015fer. \u00d6nce y\u00fczde on gibi k\u00fc\u00e7\u00fck bir oranla ba\u015flan\u0131r, raporlarda me\u015fru bir kayna\u011f\u0131n tak\u0131l\u0131p tak\u0131lmad\u0131\u011f\u0131 izlenir, sorun \u00e7\u0131kmazsa oran kademeli y\u00fckseltilir. Bu a\u015famada eksik kalan sistemlerin SPF ve DKIM kay\u0131tlar\u0131 tamamlan\u0131r.<\/p>\n<p><strong>reject a\u015famas\u0131.<\/strong> Do\u011frulamay\u0131 ge\u00e7emeyen ileti al\u0131c\u0131 sunucuda teslim edilmeden reddedilir. Alan ad\u0131n\u0131z\u0131n g\u00f6nderen olarak taklidi bu noktada pratikte biter. Buraya ancak raporlarda me\u015fru kaynak kaynakl\u0131 hata kalmad\u0131\u011f\u0131nda ge\u00e7ilir.<\/p>\n<div class=\"senaryo-block\">\n<p class=\"label\">\u00d6rnek senaryo<\/p>\n<p>Otuz ki\u015filik bir m\u00fchendislik firmas\u0131 DMARC&#8217;\u0131 none ile a\u00e7t\u0131. \u0130lk hafta raporlar\u0131nda alan ad\u0131 ad\u0131na g\u00f6nderim yapan be\u015f kaynak g\u00f6r\u00fcnd\u00fc: kurumsal e-posta sunucusu, muhasebe program\u0131n\u0131n otomatik fatura eki, b\u00fclten servisi, i\u015fe al\u0131m yaz\u0131l\u0131m\u0131 ve bir de kimsenin haberi olmayan eski bir form eklentisi. \u00dc\u00e7 kayna\u011f\u0131n DKIM imzas\u0131 hi\u00e7 yoktu. Kay\u0131tlar tamamland\u0131ktan sonra quarantine y\u00fczde on ile a\u00e7\u0131ld\u0131, iki hafta sonra y\u00fczde y\u00fcze \u00e7\u0131kar\u0131ld\u0131, alt\u0131nc\u0131 haftada reject&#8217;e ge\u00e7ildi. S\u00fcre\u00e7 boyunca tek bir me\u015fru ileti kaybedilmedi.<\/p>\n<\/div>\n<h2>DMARC raporlar\u0131 nas\u0131l okunur?<\/h2>\n<p>Raporlar iki t\u00fcrl\u00fcd\u00fcr. Toplu raporlar g\u00fcnl\u00fck olarak gelir ve alan ad\u0131n\u0131z ad\u0131na g\u00f6nderim yapan IP adreslerini, ileti say\u0131s\u0131n\u0131, SPF ile DKIM sonu\u00e7lar\u0131n\u0131 \u00f6zetler. Hata raporlar\u0131 ise tek tek ba\u015far\u0131s\u0131z iletiler i\u00e7in g\u00f6nderilir ve ki\u015fisel veri ta\u015f\u0131d\u0131\u011f\u0131 i\u00e7in \u00e7o\u011fu sa\u011flay\u0131c\u0131 bunlar\u0131 k\u0131s\u0131tl\u0131 g\u00f6nderir.<\/p>\n<p>Toplu raporlar XML bi\u00e7imindedir ve elle okunmas\u0131 zahmetlidir; k\u00fc\u00e7\u00fck bir ekipte bile bir rapor i\u015fleme arac\u0131 kullanmak zaman kazand\u0131r\u0131r. Bak\u0131lacak iki \u015fey vard\u0131r: tan\u0131mad\u0131\u011f\u0131n\u0131z bir IP adresinden \u00e7\u0131kan ve do\u011frulamay\u0131 ge\u00e7emeyen y\u00fcksek hacim, ve tan\u0131d\u0131\u011f\u0131n\u0131z bir servisin s\u00fcrekli tak\u0131lmas\u0131. Birincisi taklit denemesine, ikincisi sizin eksik kalan kayd\u0131n\u0131za i\u015faret eder.<\/p>\n<h2>Benzer alan adlar\u0131n\u0131 savunma ama\u00e7l\u0131 kaydetmek<\/h2>\n<p>B\u00fct\u00fcn varyantlar\u0131 sat\u0131n almak m\u00fcmk\u00fcn de\u011fildir; bir markan\u0131n kar\u0131\u015ft\u0131r\u0131labilir yaz\u0131m\u0131 y\u00fczlerce olabilir. Makul yakla\u015f\u0131m, riski en y\u00fcksek olan dar bir k\u00fcmeyle s\u0131n\u0131rlanmakt\u0131r: en \u00e7ok kulland\u0131\u011f\u0131n\u0131z uzant\u0131n\u0131n kom\u015fular\u0131, marka ad\u0131ndaki biti\u015fik harflerin yer de\u011fi\u015ftirmi\u015f h\u00e2li, tireli ve tiresiz yaz\u0131m, ve \u00e7o\u011ful ya da tekil bi\u00e7im.<\/p>\n<p>Kaydetti\u011finiz savunma alan adlar\u0131n\u0131 bo\u015f b\u0131rakmay\u0131n. Hepsini ana alan ad\u0131n\u0131za y\u00f6nlendirin, \u00fczerlerinde e-posta g\u00f6nderimini kapatan bir SPF kayd\u0131 ve reject politikal\u0131 bir DMARC kayd\u0131 b\u0131rak\u0131n. B\u00f6ylece o alan adlar\u0131 ba\u015fkas\u0131n\u0131n eline ge\u00e7medi\u011fi gibi, sizin ad\u0131n\u0131za g\u00f6nderim arac\u0131 olarak da kullan\u0131lamaz. Kay\u0131t yenileme tarihlerini de ana alan ad\u0131n\u0131zla ayn\u0131 takvime al\u0131n; unutulup d\u00fc\u015fen bir savunma alan ad\u0131, tam da korumak istedi\u011finiz ki\u015finin eline ge\u00e7er.<\/p>\n<h2>Al\u0131c\u0131 taraf\u0131n\u0131 g\u00fc\u00e7lendirmek<\/h2>\n<p>Teknik kay\u0131tlar g\u00f6nderen taraf\u0131n\u0131 korur. Kurumunuza gelen taklit iletilere kar\u015f\u0131 ise al\u0131c\u0131 taraf\u0131nda \u00fc\u00e7 ayar i\u015fe yarar. Birincisi, d\u0131\u015far\u0131dan gelen iletilere g\u00f6r\u00fcn\u00fcr bir uyar\u0131 etiketi eklemek. \u0130kincisi, g\u00f6nderen ad\u0131 kurum i\u00e7indeki bir y\u00f6neticiyle e\u015fle\u015fip adresi d\u0131\u015far\u0131dan olan iletileri karantinaya almak. \u00dc\u00e7\u00fcnc\u00fcs\u00fc, kurumsal e-posta altyap\u0131s\u0131n\u0131 ortak bir y\u00f6netim alt\u0131nda toplamak; da\u011f\u0131n\u0131k ki\u015fisel hesaplarla \u00e7al\u0131\u015fan bir yap\u0131da bu kurallar\u0131n hi\u00e7biri uygulanamaz.<\/p>\n<p>\u015eirket e-postas\u0131n\u0131 kurumsal bir alan ad\u0131 \u00fczerinde toplamad\u0131ysan\u0131z ba\u015flang\u0131\u00e7 noktas\u0131 oras\u0131d\u0131r; <a href=\"https:\/\/narhost.com\/blog\/sirket-e-posta-olusturma\/\" title=\"\u015eirket e-postas\u0131 olu\u015fturma ad\u0131mlar\u0131 ve kurulum\">\u015firket e-postas\u0131 olu\u015fturma yaz\u0131m\u0131z<\/a> kurulum s\u0131ras\u0131n\u0131 anlat\u0131yor. Web taraf\u0131nda ise sahte giri\u015f sayfalar\u0131n\u0131 ay\u0131rt etmenin en pratik yolu sertifika kontrol\u00fcd\u00fcr; <a href=\"https:\/\/narhost.com\/blog\/ssl-sertifikasi-nedir\/\" title=\"SSL sertifikas\u0131 nedir, t\u00fcrleri ve kurulumu\">SSL sertifikas\u0131 nedir yaz\u0131m\u0131zda<\/a> do\u011frulama seviyeleri aras\u0131ndaki fark\u0131 a\u00e7\u0131klad\u0131k.<\/p>\n<h2>\u00c7al\u0131\u015fan fark\u0131ndal\u0131\u011f\u0131 ve s\u00fcre\u00e7 savunmas\u0131<\/h2>\n<p>Domain spoofing nedir sorusunun en can s\u0131k\u0131c\u0131 taraf\u0131, teknik savunman\u0131n bitti\u011fi yerde i\u015fin insana kalmas\u0131d\u0131r. Para transferi, banka hesab\u0131 de\u011fi\u015fikli\u011fi, maa\u015f bordrosu y\u00f6nlendirmesi ve tedarik\u00e7i bilgisi g\u00fcncellemesi gibi talepler i\u00e7in tek kural yeterlidir: talep hangi kanaldan gelirse gelsin, kay\u0131tl\u0131 telefon numaras\u0131 \u00fczerinden ikinci kez do\u011frulanmadan uygulanmaz. Bu kural yaz\u0131l\u0131 olmal\u0131, istisnas\u0131 bulunmamal\u0131 ve aciliyet bask\u0131s\u0131 alt\u0131nda delinmemelidir.<\/p>\n<p>Fark\u0131ndal\u0131k e\u011fitiminde soyut anlat\u0131m yerine kendi alan ad\u0131n\u0131z\u0131n varyantlar\u0131n\u0131 g\u00f6sterin. \u00c7al\u0131\u015fan\u0131n ekranda g\u00f6rd\u00fc\u011f\u00fc \u015fey marka ad\u0131n\u0131n bir harfi eksik h\u00e2liyse, o \u00f6rne\u011fi bir kez g\u00f6rm\u00fc\u015f olmak uzun bir sunumdan daha \u00e7ok i\u015f g\u00f6r\u00fcr.<\/p>\n<h2>Taklit sald\u0131r\u0131s\u0131na u\u011frad\u0131ysan\u0131z ne yapmal\u0131?<\/h2>\n<p>M\u00fc\u015fterileriniz sizin ad\u0131n\u0131za gelen sahte e-postalardan \u015fik\u00e2yet etmeye ba\u015flad\u0131ysa s\u0131ra \u015fudur. \u00d6nce kendi kay\u0131tlar\u0131n\u0131z\u0131 do\u011frulay\u0131n; taklit sizin alan ad\u0131n\u0131z \u00fczerinden yap\u0131l\u0131yorsa DMARC politikan\u0131z\u0131 s\u0131k\u0131la\u015ft\u0131rmak sald\u0131r\u0131y\u0131 do\u011frudan keser. Taklit benzer bir alan ad\u0131ndan yap\u0131l\u0131yorsa o alan ad\u0131n\u0131n WHOIS kayd\u0131n\u0131 ve bar\u0131nd\u0131r\u0131ld\u0131\u011f\u0131 sa\u011flay\u0131c\u0131y\u0131 \u00e7\u0131kar\u0131n, k\u00f6t\u00fcye kullan\u0131m bildirimini sa\u011flay\u0131c\u0131ya ve alan ad\u0131 kay\u0131t kurulu\u015funa iletin.<\/p>\n<p>E\u015f zamanl\u0131 olarak m\u00fc\u015fterilerinize ve tedarik\u00e7ilerinize kendi resm\u00ee kanal\u0131n\u0131zdan uyar\u0131 g\u00f6nderin; ger\u00e7ek alan ad\u0131n\u0131z\u0131 ve \u00f6deme bilgilerinizin de\u011fi\u015fmedi\u011fini a\u00e7\u0131k\u00e7a yaz\u0131n. \u0130\u00e7 tarafta, sald\u0131r\u0131 s\u00fcresince gelen t\u00fcm \u00f6deme taleplerini geriye d\u00f6n\u00fck g\u00f6zden ge\u00e7irin. Son olarak sahte alan ad\u0131n\u0131 kendi e-posta filtrelerinize engelli olarak ekleyin ve izlemeye al\u0131n; ayn\u0131 ki\u015fi genelde benzer bir varyantla geri d\u00f6ner.<\/p>\n<ul class=\"kontrol-listesi\">\n<li>Alan ad\u0131n\u0131z i\u00e7in SPF kayd\u0131n\u0131 tek sat\u0131r h\u00e2linde yay\u0131nlay\u0131n, yetkili t\u00fcm g\u00f6nderim kaynaklar\u0131n\u0131 i\u00e7ine al\u0131n.<\/li>\n<li>Kurumsal e-posta sunucunuzda DKIM imzalamay\u0131 a\u00e7\u0131n ve a\u00e7\u0131k anahtar\u0131 DNS&#8217;e ekleyin.<\/li>\n<li>DMARC kayd\u0131n\u0131 none politikas\u0131yla ba\u015flat\u0131n, rapor adresini tan\u0131mlay\u0131n ve en az bir ay veri toplay\u0131n.<\/li>\n<li>Raporlarda g\u00f6r\u00fcnen me\u015fru g\u00f6nderim kaynaklar\u0131n\u0131n eksik kay\u0131tlar\u0131n\u0131 tamamlay\u0131n.<\/li>\n<li>quarantine a\u015famas\u0131n\u0131 d\u00fc\u015f\u00fck oranla a\u00e7\u0131n, sorun \u00e7\u0131kmazsa kademeli y\u00fckseltip reject&#8217;e ge\u00e7in.<\/li>\n<li>Marka ad\u0131n\u0131z\u0131n en \u00e7ok kar\u0131\u015ft\u0131r\u0131lan \u00fc\u00e7 d\u00f6rt varyant\u0131n\u0131 kaydedin, g\u00f6nderime kapal\u0131 DNS kay\u0131tlar\u0131yla park edin.<\/li>\n<li>Gelen e-postada d\u0131\u015f g\u00f6nderen etiketini ve g\u00f6r\u00fcnen ad uyar\u0131s\u0131n\u0131 etkinle\u015ftirin.<\/li>\n<li>\u00d6deme ve hesap bilgisi de\u011fi\u015fikli\u011fi taleplerinde ikinci kanaldan do\u011frulamay\u0131 yaz\u0131l\u0131 kural h\u00e2line getirin.<\/li>\n<\/ul>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>Domain spoofing nedir sorusunun savunma taraf\u0131ndaki cevab\u0131 iki katmanl\u0131d\u0131r. Alan ad\u0131n\u0131z\u0131n g\u00f6nderen olarak taklidini SPF, DKIM ve kademeli olarak reject&#8217;e \u00e7\u0131kar\u0131lm\u0131\u015f bir DMARC politikas\u0131 bitirir. Benzer yaz\u0131ml\u0131 alan adlar\u0131ndan gelen sald\u0131r\u0131y\u0131 ise savunma ama\u00e7l\u0131 kay\u0131t, izleme ve ikinci kanaldan do\u011frulama kural\u0131 durdurur. \u0130ki katman\u0131 birlikte kurmayan yap\u0131larda eksik kalan taraf her zaman zay\u0131f halkad\u0131r.<\/p>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>Domain spoofing nedir, phishing ile ayn\u0131 \u015fey mi?<\/h3>\n<p>Ayn\u0131 de\u011fil, biri di\u011ferinin arac\u0131d\u0131r. Alan ad\u0131 taklidi, iletinin g\u00fcvenilir bir kaynaktan geldi\u011fi izlenimini yaratma tekni\u011fidir. Oltalama ise o izlenimi kullanarak bilgi ya da para elde etme amac\u0131d\u0131r. Her oltalama giri\u015fimi alan ad\u0131 taklidi i\u00e7ermez, ama kurumsal hedefli olanlar\u0131n \u00e7o\u011fu i\u00e7erir.<\/p>\n<h3>SPF kayd\u0131m var, bu yeterli mi?<\/h3>\n<p>Tek ba\u015f\u0131na yeterli de\u011fildir. SPF yaln\u0131zca g\u00f6nderim yapan sunucunun yetkili olup olmad\u0131\u011f\u0131na bakar ve iletme durumlar\u0131nda kolayca bozulur. DKIM imzas\u0131 i\u00e7erik b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc de do\u011frular, DMARC ise ikisinin sonucunu g\u00f6r\u00fcnen g\u00f6nderen adresiyle e\u015fle\u015ftirir ve al\u0131c\u0131ya ne yapaca\u011f\u0131n\u0131 s\u00f6yler. \u00dc\u00e7\u00fc birlikte anlaml\u0131d\u0131r.<\/p>\n<h3>DMARC politikas\u0131n\u0131 do\u011frudan reject yapsam ne olur?<\/h3>\n<p>Alan ad\u0131n\u0131z ad\u0131na g\u00f6nderim yapan ve kayd\u0131 eksik kalan her sistem ayn\u0131 anda susar. Fatura bildirimleri, \u015fifre s\u0131f\u0131rlama e-postalar\u0131 ya da b\u00fclten g\u00f6nderimi kar\u015f\u0131 tarafa hi\u00e7 ula\u015fmaz ve \u00e7o\u011fu zaman bunu g\u00fcnler sonra fark edersiniz. Bu y\u00fczden none ve quarantine a\u015famalar\u0131 atlanmaz.<\/p>\n<h3>Benzer alan ad\u0131 kaydedilmesini engelleyebilir miyim?<\/h3>\n<p>Kay\u0131t a\u015famas\u0131nda engelleyemezsiniz, alan adlar\u0131 ilk gelen al\u0131r kural\u0131yla verilir. Yapabilece\u011finiz iki \u015fey var: riskli varyantlar\u0131 \u00f6nceden kaydetmek ve marka izleme ile yeni kay\u0131tlar\u0131 takip edip k\u00f6t\u00fcye kullan\u0131m h\u00e2linde kay\u0131t kurulu\u015funa bildirimde bulunmak.<\/p>\n<h3>Sahte alan ad\u0131ndan gelen e-postay\u0131 sunucumda durdurabilir miyim?<\/h3>\n<p>Kendi kurumunuza gelen iletiler i\u00e7in evet. Bilinen taklit alan adlar\u0131n\u0131 filtrede engelleyebilir, d\u0131\u015f g\u00f6nderen etiketi ve g\u00f6r\u00fcnen ad kurallar\u0131 tan\u0131mlayabilirsiniz. Ancak ayn\u0131 sahte alan ad\u0131ndan m\u00fc\u015fterilerinize giden iletileri sizin sunucunuz g\u00f6remez; orada bildirim ve m\u00fc\u015fteri uyar\u0131s\u0131 devreye girer.<\/p>\n<\/div>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost&#8217;ta<\/p>\n<p>Kurumsal e-posta hizmetinde alan ad\u0131n\u0131za ait hesaplar\u0131 tek panelden y\u00f6netir, SPF ve DKIM kay\u0131tlar\u0131n\u0131 kendi alan ad\u0131n\u0131z \u00fczerinde kurars\u0131n\u0131z. Anti-spam ve temiz mail altyap\u0131s\u0131 paketlere dahildir.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/kurumsal-e-posta\" title=\"Narhost kurumsal e-posta paketleri\">Kurumsal e-posta paketlerini incele<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Domain spoofing nedir sorusunun cevab\u0131, e-posta g\u00f6nderen taklidi ile benzer alan ad\u0131 kayd\u0131 aras\u0131ndaki fark, SPF, DKIM ve DMARC \u00fc\u00e7l\u00fcs\u00fcn\u00fcn s\u0131n\u0131rlar\u0131 ve DMARC politikas\u0131n\u0131 none&#8217;dan reject&#8217;e ta\u015f\u0131ma s\u0131ras\u0131.<\/p>\n","protected":false},"author":1,"featured_media":2302,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"class_list":["post-486","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/comments?post=486"}],"version-history":[{"count":4,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/486\/revisions"}],"predecessor-version":[{"id":2301,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/486\/revisions\/2301"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media\/2302"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media?parent=486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/categories?post=486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/tags?post=486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}