URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: avanospetrol.com.tr
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-10-19 21:05:08 UTC
Total malware sites :1
A record(s) observed :4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-07-10 11:50:59 178.63.100.251dobby.thevpsserver.comNot listedAS24940 HETZNER-AS- DEyes
2025-04-27 18:13:21 93.186.120.141srv.kobinet.web.trNot listedAS44565 VITAL- TRno
2021-03-10 16:17:17 193.162.43.101kayra.verinomidns.comNot listedAS213274 VERINOMI- TRno
2020-10-19 21:05:11 95.173.162.131dikay.billychroneous.comNot listedAS51559 NETINTERNET- TRno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-10-19 21:05:11https://avanospetrol.com.tr/cgi-bin/lm/exje1vqm...Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-10-19 22:31:167e69f33e4f71aaa1cf3811ca98c17f7d43b44d9553b166370556d17b0e5bbd81docHeodo
2020-10-19 22:01:55de03a7b73f65426eaf1bd2ce4ddb88c4e288be92a679a7390d760ec9a6017712doc Heodo
2020-10-19 21:46:259a1400c87eb903c4fa8bf92ef429307203a804d6e4a589f6472ea7b00c4b75fddoc Heodo
2020-10-19 21:24:38454ffbe5dcfd5e38ebc281f1f3c4fbc46fdd10fe5023b89735443e97c0274fb4doc Heodo
2020-10-19 21:05:115e6567555b2e4a67f8f23c33992a9c668b4a43136bf33bd3c0cedebd8d99c290doc Heodo