denemekulubum.com[.]trDomain
Reported by 1 independent source · first reported by The DFIR Report · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting“During our investigation, we determined that the acquirer was hosted at denemekulubum.com[.]tr/acquirer/, while an older, now-defunct acquirer had previously been hosted at wiprz.com/acquirer/.”
Indicators reported together
named in the same reports- cs2.ip.thc[.]orgin 1 report
- wiprz[.]comin 1 report
- hxxps://s3.filebase[.]comin 1 report
- s3.filebase[.]comin 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2025-55182, CVE-2025-9501
Thanks — we review every report.