############################################################################## # URLhaus ASN CSV Feed # # Generated on 2025-11-19 08:15:08 UTC # # # # For questions please refer to: # # https://urlhaus.abuse.ch/feeds/ # ############################################################################## # # Feed generated for AS3188 # # Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country "2025-06-07 06:51:08","https://arcapalet.com/summonycaptpictureschecks.jpg","offline","malware_download","booking|clickfix|fakecaptcha","arcapalet.com","5.2.84.86","3188","TR" "2024-10-16 15:24:14","http://verideposu.net/yardim/AA_v3.exe","offline","malware_download","FlawedAmmyRAT|FlawedAmmyyRAT","verideposu.net","5.2.84.214","3188","TR" "2024-04-30 04:52:06","https://gifdemo.com/gps_sunum/wp-content/plugins/share-private-fls/shared","offline","malware_download","Latrodectus","gifdemo.com","185.8.33.210","3188","TR" "2024-04-30 04:52:06","https://gifdemo.com/mertmetdemo/wp-content/plugins/share-private-fls/shared","offline","malware_download","Latrodectus","gifdemo.com","185.8.33.210","3188","TR" "2023-12-21 16:04:27","https://erkascozgu.com/qds/","offline","malware_download","Pikabot|TA577|TR|zip","erkascozgu.com","5.2.85.51","3188","TR" "2023-12-20 14:57:34","https://sirvankolan.com/u6i/","offline","malware_download","Pikabot|TA577|TR|zip","sirvankolan.com","5.2.84.236","3188","TR" "2023-12-19 15:07:10","https://neonorm.com.tr/jftcja/","offline","malware_download","TR","neonorm.com.tr","5.2.84.78","3188","TR" "2023-12-19 15:05:23","https://kaplikayaadacafe.com/xjlii5/","offline","malware_download","TR","kaplikayaadacafe.com","5.2.85.51","3188","TR" "2023-12-15 08:44:00","https://fixist.de/mvve16/","offline","malware_download","js|Pikabot|TA577|TR|zip","fixist.de","5.2.85.51","3188","TR" "2023-12-15 08:43:56","https://radteknoloji.com/zaoap/","offline","malware_download","js|Pikabot|TA577|TR|zip","radteknoloji.com","5.2.85.51","3188","TR" "2023-12-15 08:43:28","https://handytechnik.net/mtf2j/","offline","malware_download","js|Pikabot|TA577|TR|zip","handytechnik.net","5.2.85.51","3188","TR" "2023-12-15 08:43:27","https://salarut.com/mdydjw/","offline","malware_download","js|Pikabot|TA577|TR|zip","salarut.com","5.2.85.51","3188","TR" "2023-12-15 08:42:59","https://fixist.net/d3cxg/","offline","malware_download","js|Pikabot|TA577|TR|zip","fixist.net","5.2.85.51","3188","TR" "2023-12-15 08:42:53","https://tepee.com.tr/6f0yfl/","offline","malware_download","js|Pikabot|TA577|TR|zip","tepee.com.tr","5.2.85.51","3188","TR" "2023-12-15 08:42:14","https://ceronimo.com.tr/k46e38/","offline","malware_download","js|Pikabot|TA577|TR|zip","ceronimo.com.tr","5.2.85.51","3188","TR" "2023-04-10 16:20:15","http://canmuhendislikinsaat.com/mia/mia.php","offline","malware_download","BB23|geofenced|Qakbot|Qbot|Quakbot|R89|tr|USA|wsf|zip","canmuhendislikinsaat.com","5.2.84.41","3188","TR" "2023-04-06 15:41:27","https://demolarreal.site/da/da.php","offline","malware_download","755|BB22|geofenced|js|Qakbot|Qbot|Quakbot|tr|USA|wsf|zip","demolarreal.site","5.2.84.46","3188","TR" "2023-03-24 04:03:58","https://findiktanem.com/trr/trr.php","offline","malware_download","BB20|geofenced|js|Qakbot|Qbot|Quakbot|TR|USA","findiktanem.com","5.2.84.36","3188","TR" "2023-03-24 03:59:18","https://artofarms.com.tr/eaq/eaq.php","offline","malware_download","BB20|geofenced|js|Qakbot|Qbot|Quakbot|TR|USA","artofarms.com.tr","5.2.84.41","3188","TR" "2022-12-20 20:49:11","https://polinetmetal.com.tr/rme/index.php","offline","malware_download","BB11|IMG|Qakbot|Qbot|Quakbot|RR17|TR|VHD|zip","polinetmetal.com.tr","185.8.128.66","3188","TR" "2022-12-20 17:22:57","https://polinetmetal.com.tr/tlud/index.php","offline","malware_download","BB11|IMG|Qakbot|Qbot|Quakbot|RR17|TR|VHD|zip","polinetmetal.com.tr","185.8.128.66","3188","TR" "2022-12-19 21:43:25","https://luxterpoli.com/qmis/index.php","offline","malware_download","BB11|IMG|ISO|Qakbot|Qbot|Quakbot|TR|TR23|zip","luxterpoli.com","5.2.81.126","3188","TR" "2022-12-19 16:35:12","https://polinetmetal.com.tr/tis/index.php","offline","malware_download","BB11|IMG|ISO|Qakbot|Qbot|Quakbot|TR|TR23|zip","polinetmetal.com.tr","185.8.128.66","3188","TR" "2022-12-15 17:30:17","https://polinetmetal.com.tr/eon/index.php","offline","malware_download","50000|E17|gozi|ISFB|ISO|PM11|TR|zip","polinetmetal.com.tr","185.8.128.66","3188","TR" "2022-12-15 16:16:29","https://luxterpoli.com/oe/index.php","offline","malware_download","BB10|E17|ISO|qakbot|qbot|quakbot|TR|zip","luxterpoli.com","5.2.81.126","3188","TR" "2022-12-14 20:12:13","https://polinetmetal.com.tr/sq/index.php","offline","malware_download","BB10|ISO|nt005|qakbot|qbot|quakbot|TR|zip","polinetmetal.com.tr","185.8.128.66","3188","TR" "2022-12-14 20:09:19","https://luxterpoli.com/iuee/index.php","offline","malware_download","BB10|ISO|nt005|qakbot|qbot|quakbot|TR|zip","luxterpoli.com","5.2.81.126","3188","TR" "2022-10-31 16:12:18","https://islamhaberleri.com/tt/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","islamhaberleri.com","5.2.85.36","3188","TR" "2022-10-31 16:11:42","https://inkauzem.com/dlol/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","inkauzem.com","5.2.85.161","3188","TR" "2022-10-31 16:06:23","https://baharevvakfi.org/llm/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","baharevvakfi.org","5.2.84.41","3188","TR" "2022-10-31 16:05:20","https://ajansay.com/qiu/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","ajansay.com","5.2.84.36","3188","TR" "2022-05-07 02:14:08","https://ayarbilisim.com/par/f/5rj6VDK2K.zip","offline","malware_download","b-TDS|obama182|Qakbot|qbot|Quakbot|zip","ayarbilisim.com","5.2.84.41","3188","TR" "2022-05-07 02:13:05","http://ayarbilisim.com/par/f/5rj6vdk2k.zip","offline","malware_download","b-TDS|obama182|Qakbot|qbot|Quakbot|zip","ayarbilisim.com","5.2.84.41","3188","TR" "2022-05-06 01:51:07","http://ayarbilisim.com/par/lt86MBanhO.zip","offline","malware_download","b-TDS|obama182|Qakbot|qbot|Quakbot|zip","ayarbilisim.com","5.2.84.41","3188","TR" "2021-04-26 22:33:09","https://liquide.co/3QYyerb6gVX/ind.html","offline","malware_download","b-TDS|dll|Qakbot|Qbot|Quakbot|SilentBuilder|TR","liquide.co","5.2.87.121","3188","TR" "2021-04-15 17:23:15","http://www.nevform.com/eQCVA/catalogue-55.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 17:12:11","http://www.nevform.com/eQCVA/catalogue-70.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 17:11:08","http://www.nevform.com/eQCVA/catalogue-77.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 17:07:27","http://www.nevform.com/eQCVA/catalogue-96.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 16:42:19","http://www.nevform.com/eQCVA/catalogue-34.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 16:36:05","http://www.nevform.com/eQCVA/catalogue-63.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 16:31:04","http://www.nevform.com/eQCVA/catalogue-99.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 16:25:32","http://www.nevform.com/eQCVA/catalogue-89.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 16:19:09","http://www.nevform.com/eQCVA/catalogue-97.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR|zip","www.nevform.com","5.2.81.176","3188","TR" "2021-04-15 16:12:15","http://www.nevform.com/eQCVA/catalogue-78.zip","offline","malware_download","b-TDS|Qakbot|Qbot|SilentBuilder|TR","www.nevform.com","5.2.81.176","3188","TR" "2020-10-27 06:41:05","https://www.firsattrade.com/wp-content/pI/","offline","malware_download","emotet|epoch1|exe|Heodo","www.firsattrade.com","185.8.128.66","3188","TR" "2020-09-04 08:52:04","http://pimakgida.com/wp-content/esp/3ifc12469887411287048wde34ggk/","offline","malware_download","doc|emotet|epoch2|heodo","pimakgida.com","5.2.84.96","3188","TR" "2020-08-28 19:53:06","http://pimakgida.com/wp-content/payment/","offline","malware_download","doc|emotet|epoch2|Heodo","pimakgida.com","5.2.84.96","3188","TR" "2020-08-19 10:54:45","http://ceyhunhurcan.com/revolution-addons/mRXi8NJ/","offline","malware_download","emotet|epoch2|exe|Heodo","ceyhunhurcan.com","5.2.85.136","3188","TR" "2020-08-15 00:25:04","https://timbersdeck.com/wp-admin/Reporting/","offline","malware_download","doc|emotet|epoch2|heodo","timbersdeck.com","5.2.84.61","3188","TR" "2020-08-13 00:02:13","https://timbersdeck.com/wp-admin/report/0apf5m90/","offline","malware_download","doc|emotet|epoch2|heodo","timbersdeck.com","5.2.84.61","3188","TR" "2020-08-12 06:27:39","https://denizyahci.com/asset/payment/ekjrwl4rw1/","offline","malware_download","doc|emotet|epoch2|heodo","denizyahci.com","5.2.84.61","3188","TR" "2020-08-10 12:41:13","https://timbersdeck.com/wp-admin/statement/","offline","malware_download","doc|emotet|epoch2|heodo","timbersdeck.com","5.2.84.61","3188","TR" "2020-08-07 05:23:33","https://denizyahci.com/asset/0cc3sjf/dwhz6yr60311487960399018uquvz246oc/","offline","malware_download","doc|emotet|epoch2|heodo|QuakBot","denizyahci.com","5.2.84.61","3188","TR" "2020-07-30 00:45:06","https://denizyahci.com/asset/4z8qjblu71664/","offline","malware_download","emotet|epoch3|exe|heodo","denizyahci.com","5.2.84.61","3188","TR" "2020-07-28 10:00:10","http://ceyhunhurcan.com/wp-content/sites/","offline","malware_download","doc|emotet|epoch2|heodo","ceyhunhurcan.com","5.2.85.136","3188","TR" "2020-06-10 05:34:12","http://sancakcati.com/UPS/ShippingInfo.jar","offline","malware_download","Adwind|JAR|malware","sancakcati.com","5.2.85.36","3188","TR" "2020-01-13 09:25:06","https://gen-enerji.com/SAB_RptRemittanceAdvice01_PDF.jar","offline","malware_download","jar|pyrogenic|Qealler|stealer","gen-enerji.com","185.8.33.83","3188","TR" "2019-12-19 13:24:05","https://www.toprakcelik.com/wordpress/eyj0d-5ta-43/","offline","malware_download","doc|emotet|epoch3|heodo","www.toprakcelik.com","5.2.85.41","3188","TR" "2019-09-20 17:53:07","http://barcaacademyistanbul.com/wp-admin/MozLqtMPp/","offline","malware_download","Emotet|epoch3|exe|Heodo","barcaacademyistanbul.com","5.2.84.86","3188","TR" "2019-08-19 06:29:05","http://aksmobilya.com/wp-connect/Payment.exe","offline","malware_download","AgentTesla|exe","aksmobilya.com","5.2.87.61","3188","TR" "2019-03-28 12:56:06","http://ankarahurdacim.com/wp-admin/3Yk1/","offline","malware_download","emotet|epoch1|exe|Heodo","ankarahurdacim.com","5.2.84.46","3188","TR" "2019-03-13 07:00:14","https://ispet.com.tr/wp-includes/7nnl7-u9kqn9-xudtrq/","offline","malware_download","Emotet|Heodo","ispet.com.tr","185.8.33.207","3188","TR" "2019-03-11 16:09:03","http://bozcaada.biz/wp-includes/ynnwr-sdvw3-adyqy.view/","offline","malware_download","Emotet|Heodo","bozcaada.biz","5.2.84.96","3188","TR" "2019-02-07 11:28:33","http://www.ikofisi.com/En/llc/Invoice/fnvV-LjqQA_WSrIgO-gz/","offline","malware_download","Emotet|Heodo","www.ikofisi.com","5.2.85.176","3188","TR" "2019-01-18 09:17:07","http://farukyilmaz.com.tr/wp-content/languages/plugins/sserv.jpg","offline","malware_download","exe","farukyilmaz.com.tr","5.2.85.221","3188","TR" "2019-01-18 09:17:05","http://farukyilmaz.com.tr/wp-content/languages/plugins/zinf.jpg","offline","malware_download","exe","farukyilmaz.com.tr","5.2.85.221","3188","TR" "2019-01-18 09:01:20","http://farukyilmaz.com.tr/wp-includes/ID3/ssj.jpg","offline","malware_download","exe|Troldesh","farukyilmaz.com.tr","5.2.85.221","3188","TR" "2019-01-18 01:34:06","http://2benerji.com/Amazon/Transaction_details/012019/","offline","malware_download","emotet|epoch1","2benerji.com","5.2.84.46","3188","TR" "2019-01-16 23:20:26","http://www.2benerji.com/Amazon/Transaction_details/012019/","offline","malware_download","emotet|epoch1|Heodo","www.2benerji.com","5.2.84.46","3188","TR" "2019-01-15 07:03:07","http://istanbulklinik.com/vzsYTia_5W7H/","offline","malware_download","emotet|epoch2|exe|Heodo","istanbulklinik.com","5.2.84.41","3188","TR" "2018-12-01 01:01:03","https://ercancihandide.com/En/CM2018-COUPONS/","offline","malware_download","doc|emotet|epoch1|Heodo","ercancihandide.com","5.2.84.61","3188","TR" "2018-11-30 15:44:39","https://ercancihandide.com/En/CM2018-COUPONS","offline","malware_download","doc|emotet|Heodo","ercancihandide.com","5.2.84.61","3188","TR" "2018-10-08 06:31:26","http://mukelmimarlik.com/07675BKFWUIB/SEP/Smallbusiness","offline","malware_download","doc|emotet|heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-09-23 01:35:05","http://senaryolarim.com/Download/US/Outstanding-Invoices/","offline","malware_download","doc|Heodo","senaryolarim.com","5.2.84.21","3188","TR" "2018-09-11 05:15:17","http://senaryolarim.com/Download/US/Outstanding-Invoices","offline","malware_download","doc|emotet|epoch2|Heodo","senaryolarim.com","5.2.84.21","3188","TR" "2018-09-08 07:00:22","http://dmgkagit.com.tr/doc/En/Aug2018/97610","offline","malware_download","doc|emotet|heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-09-05 05:01:24","http://senaryolarim.com/464363VFJR/identity/Personal/","offline","malware_download","doc|emotet|epoch2|Heodo","senaryolarim.com","5.2.84.21","3188","TR" "2018-09-03 16:33:30","http://senaryolarim.com/464363VFJR/identity/Personal","offline","malware_download","doc|emotet|heodo","senaryolarim.com","5.2.84.21","3188","TR" "2018-08-31 05:18:26","https://mukelmimarlik.com/07675BKFWUIB/SEP/Smallbusiness/","offline","malware_download","doc|emotet|epoch2|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-31 05:06:54","http://mukelmimarlik.com/311831ITASH/com/Business","offline","malware_download","emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-30 23:43:23","https://mukelmimarlik.com/07675BKFWUIB/SEP/Smallbusiness","offline","malware_download","doc|emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-24 04:34:01","http://mukelmimarlik.com/429084AZXFT/oamo/US/","offline","malware_download","doc|emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-24 04:33:56","http://mukelmimarlik.com/2416JND/identity/Business/","offline","malware_download","doc|emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-23 17:57:09","http://mukelmimarlik.com/2416JND/identity/Business","offline","malware_download","doc|emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-22 11:25:14","http://mukelmimarlik.com/429084AZXFT/oamo/US","offline","malware_download","doc|emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-21 04:44:19","http://senaryolarim.com/g1l0bz/16CIAFU/oamo/Commercial/","offline","malware_download","doc|emotet|Heodo","senaryolarim.com","5.2.84.21","3188","TR" "2018-08-21 04:44:17","http://senaryolarim.com/969880NPXID/oamo/Smallbusiness/","offline","malware_download","doc|emotet|Heodo","senaryolarim.com","5.2.84.21","3188","TR" "2018-08-20 15:36:00","http://senaryolarim.com/969880NPXID/oamo/Smallbusiness","offline","malware_download","doc|emotet|Heodo","senaryolarim.com","5.2.84.21","3188","TR" "2018-08-17 08:54:06","http://senaryolarim.com/g1l0bz/16CIAFU/oamo/Commercial","offline","malware_download","doc|emotet|heodo","senaryolarim.com","5.2.84.21","3188","TR" "2018-08-17 03:36:16","http://mukelmimarlik.com/default/EN_en/Past-Due-Invoices/Invoice-69579/","offline","malware_download","doc|emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-16 20:57:10","http://mukelmimarlik.com/default/EN_en/Past-Due-Invoices/Invoice-69579","offline","malware_download","doc|emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-13 22:17:33","http://mukelmimarlik.com/Aug2018/US/Invoice/Deposit/","offline","malware_download","doc|emotet|Heodo","mukelmimarlik.com","5.2.84.66","3188","TR" "2018-08-13 22:12:06","http://dmgkagit.com.tr/Aug2018/US_us/INVOICE-STATUS/Invoice-621041/","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-10 12:58:09","http://dmgkagit.com.tr/Aug2018/US_us/INVOICE-STATUS/Invoice-621041","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-09 05:14:59","http://dmgkagit.com.tr/LLC/TDG9437392338FTZDPQ/1195419045/QP-KHK-Aug-08-2018/","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-08 05:04:23","http://dmgkagit.com.tr/LLC/TDG9437392338FTZDPQ/1195419045/QP-KHK-Aug-08-2018","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-07 10:04:33","http://dmgkagit.com.tr/INFO/YNAJ10335840549R/387445157/LWSK-AUVAD-Aug-05-2018>","offline","malware_download","doc|emotet","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-07 05:57:11","http://dmgkagit.com.tr/INFO/YNAJ10335840549R/387445157/LWSK-AUVAD-Aug-05-2018","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-06 16:26:25","http://dmgkagit.com.tr/INFO/YNAJ10335840549R/387445157/LWSK-AUVAD-Aug-05-2018/","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-06 16:26:24","http://dmgkagit.com.tr/CARD/SGM24667542BUC/7838068/LN-QQB-Aug-03-2018/","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-03 12:01:16","http://dmgkagit.com.tr/CARD/SGM24667542BUC/7838068/LN-QQB-Aug-03-2018","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-08-01 16:10:43","http://dmgkagit.com.tr/doc/Dokumente/FORM/in-Rechnung-gestellt-GIF-77-98963/","offline","malware_download","doc|emotet|epoch2|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-07-30 20:26:05","http://dmgkagit.com.tr/default/Dokumente/Fakturierung/IhreRechnung-BNL-74-96243/","offline","malware_download","doc|emotet|epoch2|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-07-28 01:23:36","http://dmgkagit.com.tr/doc/US_us/Open-invoices/Invoice-114833/","offline","malware_download","doc|emotet|epoch2|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-07-26 10:05:04","http://borayplastik.com/wp-includes/iexplorer.exe","offline","malware_download","exe","borayplastik.com","5.2.84.146","3188","TR" "2018-07-26 05:27:07","http://dmgkagit.com.tr/Jul2018/En_us/Invoice/Invoices","offline","malware_download","doc|emotet|heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-07-26 03:53:53","http://dmgkagit.com.tr/Jul2018/En_us/Invoice/Invoices/","offline","malware_download","doc|emotet|epoch2|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-07-20 01:59:02","http://dmgkagit.com.tr/9iHI5gW6d9/","offline","malware_download","emotet|epoch1|Heodo|payload","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-07-19 11:08:31","http://dmgkagit.com.tr/doc/EN_en/ACCOUNT/Invoices","offline","malware_download","doc|emotet|Heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-07-13 15:36:19","http://dmgkagit.com.tr/default/EN_en/DOC/Invoice-082918/","offline","malware_download","doc|emotet|heodo","dmgkagit.com.tr","5.2.84.96","3188","TR" "2018-07-10 06:48:04","http://borayplastik.com/wp-includes/windows.exe","offline","malware_download","exe|NetWire|RAT|RemcosRAT","borayplastik.com","5.2.84.146","3188","TR" "2018-06-21 12:54:38","http://fuarhastanesi.com/Connections/Client/Invoices","offline","malware_download","emotet","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-06-21 05:37:58","http://fuarhastanesi.com/Connections/Client/Invoices/","offline","malware_download","emotet|Heodo","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-06-18 13:46:03","http://fuarhastanesi.com/_mmServerScripts/Rechnungs-scan/","offline","malware_download","doc|emotet|Heodo","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-06-14 06:02:07","http://fuarhastanesi.com/icons/ACCOUNT/Pay-Invoice","offline","malware_download","doc|emotet|Heodo","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-06-14 06:02:06","http://fuarhastanesi.com/_notes/IRS-Accounts-Transcipts-873","offline","malware_download","doc|emotet|Heodo","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-06-11 17:13:08","http://fuarhastanesi.com/_notes/IRS-Accounts-Transcipts-873/","offline","malware_download","doc|emotet|epoch1|Formbook|Heodo","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-06-07 14:11:11","http://fuarhastanesi.com/phpmailer/rechnungs-fur-zahlun/","offline","malware_download","","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-06-01 16:04:41","http://fuarhastanesi.com/PHPMailer/ups.com/WebTracking/KY-0603313","offline","malware_download","doc|emotet|Heodo","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-06-01 15:22:19","http://fuarhastanesi.com/PHPMailer/ups.com/WebTracking/KY-0603313/","offline","malware_download","doc|emotet|Heodo","fuarhastanesi.com","5.2.85.181","3188","TR" "2018-05-15 14:46:54","http://fuarhastanesi.com/icons/kcpciab6qsg3zj/","offline","malware_download","doc|emotet|Heodo","fuarhastanesi.com","5.2.85.181","3188","TR" # of entries: 122