Indicator of Compromise Search
Bulk Lookup
✦ IPv4 Address ✦ Domain ✦ MD5/SHA1/SHA256 Hash ✦ URL
INDICATOR
https://zeftasarim.com/lefter
URL ⚠ 6 PULSE HITS
↓ CSV ↓ JSON
30
/100
MEDIUM
CONFIDENCE LEVEL
THREAT CONFIDENCE ANALYSIS
MEDIUM 30/100 confidence
Some evidence of suspicious activity. Further investigation recommended before action.
CLEAN LOW MED HIGH CRIT
0 25 50 75 100
OTX
20/30
6 pulses
VIRUSTOTAL
/35
N/A
ABUSEIPDB
/25
IPv4 only
URLHAUS
10/10
LISTED
General Information
No additional detail available for this indicator type.
AlienVault OTX Analysis ↗ View on OTX
6
PULSE HITS
Pulse Hits 6
Indicator Type URL
Threat Level
ASSOCIATED PULSES
PULSE NAMEDATE
URLHaus data - 21-03-2026 (Part 2) 2026-03-22
Payload_Delivery | Mar 28, 2026 | Part 2/2 2026-03-27
Payload_Delivery | Mar 25, 2026 | Part 1/2 2026-03-24
Payload_Delivery | Mar 24, 2026 | Part 1/2 2026-03-23
Payload_Delivery | Mar 23, 2026 | Part 1/3 2026-03-22
VirusTotal Analysis ↗ View on VirusTotal
⚠ VirusTotal rate limit reached. Try again shortly.
URLhaus (abuse.ch) ↗ View on URLhaus
⚠ LISTED
URLHAUS
malware_download
asciiKongTukepowershellps1
Status OFFLINE
Date Added 2026-03-21
Host zeftasarim.com
Reporter abuse_ch