www.sunaryem.com.tr - URL scan, 15 Aug 2026

MalwareAnalyzer by Cyble scanned www.sunaryem.com.tr and returned a unknown verdict (score -12). The page resolved to 141.98.204.235 on AEROTEK-AS - CIZGI TELEKOMUNIKASYON ANONIM SIRKETI, TR in TR. 10 domains and 1 IP were contacted, over 10 HTTP requests. 6 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.

Scan result

• Verdict: unknown (score -12) · Confidence 15%
• Scanned URL: http://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/0jcmr41o9v0io6au9bhi2kqd62/31905491420.pdf
• Domain: www.sunaryem.com.tr · IP: 141.98.204.235 · AS42807 · TR
• Page title: Sayfa bulunamadı – Sunar Yem
• HTTP status: 404 · text/html; charset=UTF-8
• TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Sep 23 02: · subject CN=*.sunargrup.com.tr
• HTTP requests captured: 10
• Scan tier: fast · observed 2026-08-15 18:49:06 UTC

Redirect chain

1. http://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/0jcmr41o9v0io6au9bhi2kqd62/31905491420.pdf
2. https://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/0jcmr41o9v0io6au9bhi2kqd62/31905491420.pdf

Malware communicating with this URL (6)

These samples were observed contacting or being served from www.sunaryem.com.tr. Each links to its full analysis.

• Phishing - referenced · 1c7a482638a64826390c032358de9e95 · first seen 2026-08-15
• Phishing - referenced · 408a73ebf8e300cfa8430a94ec7d6255 · first seen 2026-08-15
• Phishing - referenced · 7cf940f56680805da4b9344c422a6fce · first seen 2026-08-14
• Phishing - referenced · 0773a3019f79c1b4929d7b013d70d981 · first seen 2026-08-13
• Phishing - referenced · c6650c436497ae93ce9e8a0f89f2015f · first seen 2026-08-13
• vepukigaxigu.pdf - referenced · e3b881c2de52d2f308cc0d27a54036d1 · first seen 2026-08-13

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

• Valid TLS, no impersonation or off-origin credential post

Detected technologies

• WordPress
• Google Analytics
• jQuery

Contacted infrastructure

• 141.98.204.235 - AS42807 AEROTEK-AS - CIZGI TELEKOMUNIKASYON ANONIM SIRKETI, TR (TR)

Observed indicators

• www.sunaryem.com.tr
• gmpg.org
• cdn.jsdelivr.net
• fonts.googleapis.com
• cdnjs.cloudflare.com
• www.facebook.com
• www.instagram.com
• x.com
• www.belgemodul.com
• www.google.com
• 141.98.204.235
• https://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/0jcmr41o9v0io6au9bhi2kqd62/31905491420.pdf
• http://gmpg.org/xfn/11
• https://www.sunaryem.com.tr/xmlrpc.php
• https://cdn.jsdelivr.net/
• https://fonts.googleapis.com/
• https://www.sunaryem.com.tr/feed/
• https://www.sunaryem.com.tr/comments/feed/
• https://www.sunaryem.com.tr/wp-content/themes/flatsome/assets/js/chunk.countup.fe2c1016.js
• https://www.sunaryem.com.tr/wp-content/themes/flatsome/assets/js/chunk.sticky-sidebar.a58a6557.js

Other scans of www.sunaryem.com.tr (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 23 Aug 2026 - unknown · https://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/rmop7jn08i3pueveo5rfchk
• 23 Aug 2026 - unknown · https://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/u9kf2b1jqbg2om3rlki6s9e
• 20 Aug 2026 - unknown · https://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/m0ncblmhrob053i2givv7kj
• 18 Aug 2026 - unknown · http://www.sunarozlem.com.tr/wp-content/plugins/super-forms/uploads/php/files/lvl45hpujv7b84cg50h1n8
• 17 Aug 2026 - unknown · http://www.sunarozlem.com.tr/wp-content/plugins/super-forms/uploads/php/files/slmd3it6oub4rg57sj757f
• 17 Aug 2026 - unknown · http://www.sunarozlem.com.tr/wp-content/plugins/super-forms/uploads/php/files/slmd3it6oub4rg57sj757f
• 16 Aug 2026 - unknown · http://www.sunarozlem.com.tr/wp-content/plugins/super-forms/uploads/php/files/14mf189tbbb5368bqfl466
• 16 Aug 2026 - unknown · https://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/klj4g4c85kjh1nkhgm0hcpm
• 16 Aug 2026 - unknown · http://www.sunarozlem.com.tr/wp-content/plugins/super-forms/uploads/php/files/b0l074pfr4q2go7pvp973o
• 16 Aug 2026 - unknown · https://www.sunaryem.com.tr/wp-content/plugins/super-forms/uploads/php/files/s3osll3inrmg8s3i3v3cr8n

Questions about www.sunaryem.com.tr

Is www.sunaryem.com.tr safe?

The scan of www.sunaryem.com.tr on 15 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.sunaryem.com.tr?

6 analysed samples communicate with this URL, including Phishing.

How was www.sunaryem.com.tr checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.sunaryem.com.tr

Scanned on MalwareAnalyzer by Cyble · Open interactive scan