RaqibCTI
DOMAINSUSPICIOUS

haberekspress[.]com[.]tr

Sourced from threatfox
Type
domain
Risk score
2 / 3
First seen
Last seen
2026-09-17

Passive DNS

Historical resolution (pDNS)
Historical IPs
188[.]114[.]96[.]1, 188[.]114[.]97[.]1, 2606:4700:3034::ac43:c067, 2606:4700:3037::6815:51fb, 104[.]21[.]81[.]251, 172[.]67[.]192[.]103, 2a06:98c1:3121::1, 2a06:98c1:3120::1, 2a06:98c1:3121::4, 188[.]114[.]97[.]4, 188[.]114[.]96[.]4, 2a06:98c1:3120::4, 193[.]31[.]119[.]61, 85[.]10[.]195[.]227, 78[.]142[.]208[.]231, 2606:4700:3037::6812:2680, 2606:4700:3033::6812:2780, 104[.]18[.]38[.]128, 104[.]18[.]39[.]128, 2606:4700:30::6812:2680
Subdomains
www[.]haberekspress[.]com[.]tr, mail[.]haberekspress[.]com[.]tr
pDNS first seen
2015-03-04

Infrastructure fingerprint

Censys
ASN
13335 · CLOUDFLARENET - Cloudflare, Inc.
Open ports
80, 443, 2052, 2053, 2082, 2083, 2086, 2087, 2095, 2096, 8080, 8443

Historical hosting pivot

Validin
No historical-hosting pivot
No co-resolved domains recorded for this indicator's infrastructure.

ThreatMiner

No ThreatMiner enrichment
Registrant / related-sample enrichment is pending for this indicator.