wiprz[.]comDomain
Reported by 1 independent source · first reported by The DFIR Report · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting“…ned that the acquirer was hosted at denemekulubum.com.tr/acquirer/, while an older, now-defunct acquirer had previously been hosted at wiprz[.]com/acquirer/.”
Indicators reported together
named in the same reports- cs2.ip.thc[.]orgin 1 report
- denemekulubum.com[.]trin 1 report
- hxxps://s3.filebase[.]comin 1 report
- s3.filebase[.]comin 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2025-55182, CVE-2025-9501
Thanks — we review every report.