Is www.sunarmisir.com.tr safe?

The scan of www.sunarmisir.com.tr on 20 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.sunarmisir.com.tr?

14 analysed samples communicate with this URL, including Phishing.

How was www.sunarmisir.com.tr checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.sunarmisir.com.tr - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned www.sunarmisir.com.tr and returned a unknown verdict (score 18), categorised as credential-harvest. The page resolved to 141.98.204.235 on AEROTEK-AS - CIZGI TELEKOMUNIKASYON ANONIM SIRKETI, TR in TR. 12 domains and 1 IP were contacted, over 23 HTTP requests. 14 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 18) · Confidence 27%
Scanned URL: http://www.sunarmisir.com.tr/wp-content/plugins/super-forms/uploads/php/files/ofcusk7njv4dp4d59fg6se9jv0/zomukokitafedifiwul.pdf
Domain: www.sunarmisir.com.tr · IP: 141.98.204.235 · AS42807 · TR
Page title: Sayfa bulunamadı – Sunar Mısır
HTTP status: 404 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 8 14: · subject CN=*.com.tr.sunargrup.com.tr
HTTP requests captured: 23
Scan tier: fast · observed 2026-08-20 00:11:30 UTC

Redirect chain

http://www.sunarmisir.com.tr/wp-content/plugins/super-forms/uploads/php/files/ofcusk7njv4dp4d59fg6se9jv0/zomukokitafedifiwul.pdf
https://www.sunarmisir.com.tr/wp-content/plugins/super-forms/uploads/php/files/ofcusk7njv4dp4d59fg6se9jv0/zomukokitafedifiwul.pdf

Malware communicating with this URL (14)

These samples were observed contacting or being served from www.sunarmisir.com.tr. Each links to its full analysis.

Phishing - referenced · 4eb937ae8c620076696548483b04751a · first seen 2026-08-20
Phishing - referenced · e3b66a5125e5eaa025308ea71763c3f5 · first seen 2026-08-19
Phishing - referenced · 81321846b9e15400dd382f58a43ed375 · first seen 2026-08-19
Phishing - referenced · f830e935fbaacd76573eb23ab9fb5b25 · first seen 2026-08-19
Phishing - referenced · b259d113ff047ddb0b527631aa0dbdf4 · first seen 2026-08-16
Phishing - referenced · c6eb22a1cfe4aacd5b5093b620e8efa0 · first seen 2026-08-16
Phishing - referenced · 5bf2ecba5a42b3666bb33d6d19007e59 · first seen 2026-08-15
Phishing - referenced · 872d8872ea4d777218769ddd2e2c32c6 · first seen 2026-08-15
Phishing - referenced · ca75c03c76d8197773eacc87c1b29adf · first seen 2026-08-14
Phishing - referenced · 409a228975001d1e7413b6d1c4a39152 · first seen 2026-08-14
Phishing - referenced · ee0ac88b8a856a99ce6f73a45d52cceb · first seen 2026-08-13
Phishing - referenced · cfd9ddec577148a4ee9bd7e6bebcf8fb · first seen 2026-08-13
Phishing - referenced · 6c8178143104d2c338e6199ca671b71a · first seen 2026-08-13
Phishing - referenced · e9fa2b9eb31050a614093a3a7f54ab14 · first seen 2026-08-12

Antivirus & YARA (1 of 47 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post
A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict

Detected technologies

WordPress
Google Analytics
jQuery

Contacted infrastructure

141.98.204.235 - AS42807 AEROTEK-AS - CIZGI TELEKOMUNIKASYON ANONIM SIRKETI, TR (TR)

Observed indicators

www.sunarmisir.com.tr
gmpg.org
cdn.jsdelivr.net
fonts.googleapis.com
cdnjs.cloudflare.com
www.facebook.com
www.instagram.com
twitter.com
www.linkedin.com
www.belgemodul.com
www.kariyer.net
www.interdijital.com
141.98.204.235
https://www.sunarmisir.com.tr/wp-content/plugins/super-forms/uploads/php/files/ofcusk7njv4dp4d59fg6se9jv0/zomukokitafedifiwul.pdf
http://gmpg.org/xfn/11
https://www.sunarmisir.com.tr/xmlrpc.php
https://cdn.jsdelivr.net/
https://fonts.googleapis.com/
https://www.sunarmisir.com.tr/feed/
https://www.sunarmisir.com.tr/comments/feed/

Other scans of www.sunarmisir.com.tr (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown · http://www.sunarpazarlama.com/wp-content/plugins/super-forms/uploads/php/files/baqv2e56gcgc05f95a899
22 Aug 2026 - unknown · https://www.sunarmisir.com.tr/wp-content/plugins/super-forms/uploads/php/files/meovegedgmnrsssv0i95p
21 Aug 2026 - unknown · https://www.sunarmisir.com.tr/wp-content/plugins/super-forms/uploads/php/files/h2qt8r9t1bd180om99j6j
21 Aug 2026 - unknown · https://www.sunarmisir.com.tr/wp-content/plugins/super-forms/uploads/php/files/3bipt3b05080qcjl2en4q
20 Aug 2026 - unknown · http://www.sunarpazarlama.com/wp-content/plugins/super-forms/uploads/php/files/4j1le5obigftt85b4hs7k
20 Aug 2026 - unknown · http://www.sunarpazarlama.com/wp-content/plugins/super-forms/uploads/php/files/32c8rns2apmc68n3mfknj
16 Aug 2026 - unknown · http://www.sunarpazarlama.com/wp-content/plugins/super-forms/uploads/php/files/320e60mb08rvrg1jd5ale
15 Aug 2026 - unknown · http://www.sunarpazarlama.com/wp-content/plugins/super-forms/uploads/php/files/012n0hp8ukhatu1bha9ng
13 Aug 2026 - unknown · https://www.sunarmisir.com.tr/wp-content/plugins/super-forms/uploads/php/files/76197dthus9ohogolhacn
13 Aug 2026 - unknown · http://www.sunarpazarlama.com/wp-content/plugins/super-forms/uploads/php/files/c1lrern5eiji1gj9452lq

Questions about www.sunarmisir.com.tr

Is www.sunarmisir.com.tr safe?: The scan of www.sunarmisir.com.tr on 20 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with www.sunarmisir.com.tr?: 14 analysed samples communicate with this URL, including Phishing.
How was www.sunarmisir.com.tr checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.sunarmisir.com.tr

Scanned on MalwareAnalyzer by Cyble · Open interactive scan