URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	escgayrimenkul.com
Domain registrar:	Public Domain Registry
Domain registration date:	2016-03-17 20:35:50 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-03-29 16:16:03 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-08-20 04:27:43	45.151.251.7	luka.veridyen.com	Not listed	AS209853 VERIDYEN	TR	no
2022-04-06 00:03:06	162.241.148.29	162-241-148-29.unifiedlayer.com	Not listed	AS46606 UNIFIEDLAYER-AS-1	US	no
2022-03-29 16:16:04	162.241.148.13	bh-ht-14.webhostbox.net	Not listed	AS46606 UNIFIEDLAYER-AS-1	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-04-01 08:09:06	http://escgayrimenkul.com/cgi-bin/RuqpDmm/	Offline	dll emotet epoch5 heodo	Cryptolaemus1
2022-03-29 16:16:04	http://escgayrimenkul.com/cgi-bin/FdUYrA1SAQhjY...	Offline	doc emotet epoch4 heodo SilentBuilder	Cryptolaemus1
2022-03-29 16:16:04	http://escgayrimenkul.com/cgi-bin/FdUYrA1SAQhjY...	Offline	emotet epoch4 heodo redir-doc xls	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-04-02 15:46:14	129733e170ec693d8625168473766ed7c76d42b54184b6edd5e5ac0dd65a2e26	dll		Heodo
2022-04-02 15:36:02	7dc0bb307ada4fd2649fc2c7ecacf092424a9235526293bc85ad492b352c831f	dll		Heodo
2022-04-02 14:34:41	26d044ed61b3a633a868ab58aa19ceea58376032e664cfccc53663fad6f82f07	dll		Heodo
2022-04-02 13:39:24	d7de2cc6916e72320d678e7d9cc8ab8dcbbf3884d8b77cacadf8f950f6d2ba7a	dll		Heodo
2022-04-02 12:11:37	bbfd1f07d58ec25e8a7c5e9d3e8371bd9a5ce4b2ad415fbe0a5bbad734a9a6b4	dll		Heodo
2022-04-02 11:08:30	5ee92c734a57e6c08f3bb1a5b3edef895914945243fbd15112297a32c823b98a	dll		Heodo
2022-04-02 10:54:27	be4263015f97d66ef7a0418057fb932890e35eb4830a0f614b81245220b8d7ca	dll		Heodo
2022-04-02 09:42:36	d58c2da15e66b0f8f19ff81d7e74485804b46f0ae785c3928c96182be3e751dc	dll		Heodo
2022-04-02 08:58:23	082a8e1902a082d6a31887bf92e145854011889a7ce60b0cd2f40d4269b23b17	dll		Heodo
2022-04-02 07:59:04	648b54694ebf13c1e6213907155263ac555329d0f5876c336e99d54161c36875	dll		Heodo
2022-04-02 07:29:41	1bd8783e14e90715fc06f1ef515d7f8ba2371a55d1b5a3a57474af6aa2625fdc	dll		Heodo
2022-04-02 06:47:10	b4e607e285e0be23817ddc1c9c4419b69ab1417365db225b4a25cab2ba5cae79	dll		Heodo
2022-04-02 05:39:01	ce961e7237a28f54f36894f8599490c1a19be7f8b10eeb84c37d556bdc1904b1	dll		Heodo
2022-04-02 05:12:05	6cd11b37a691421e3c761c74bf16dddde4b7020ba2e3d41cde00ab0caa227644	dll		Heodo
2022-04-02 03:53:06	1eff58df9bc9e42e501f143c320a2e712735fd2fb35a38f05b96fe21b03e15f8	dll		Heodo
2022-04-02 03:31:27	c989348be781869b277b1d269776c6076949165334244f10a2e0385c23b175fe	dll		Heodo
2022-04-02 02:18:40	792b7ca1cf51133eeac95b7b1922d1f45bf854a5e7b901139d146bb9abd67bbd	dll		Heodo
2022-04-02 01:21:13	92904fe0833d92b2fd8578e272f1cb2b792b53a45f130cef6695357731d48402	dll		Heodo
2022-04-02 00:24:18	5970a7d5a136782577c200ea5af436ecdcdce419894f975ece9dbc032ba9ce87	dll		Heodo
2022-04-02 00:02:31	1dafe08d6f57e705a0eb3a36e5a77929b83ee24c7f8a15a9803a6bfb7b2bf004	dll		Heodo
2022-04-01 23:01:28	238b8c5a110f8643c50860cf4535e0ef2b319df3e1b3773f9eb1dd9fad41ecf5	dll		Heodo
2022-04-01 21:53:02	51bd0893f8239e98edda7a24f80d78c36f12ec4038f08c19e714e21d698a86bd	dll		Heodo
2022-04-01 20:21:11	bb02ef339774ae26c01ec7b50569896f435bb91c33c6880081f93c4acc4df438	dll		Heodo
2022-04-01 19:01:17	a350446e87bde15a894fc961898fdee77ed940f3c193a0dde2ab1f5472e9deff	dll		Heodo
2022-04-01 18:16:07	c7eb1d59ab011370b698d5022e6ab6618317594c10fe874e7ef36362a64e2a27	dll		Heodo
2022-04-01 18:04:40	149865238b6bfbd9cfbcf3597e1dec5af4429be67a4fe0812f1d7c5169063988	dll		Heodo
2022-04-01 16:40:43	787dd24b7468574c3a741585560a5137489087bb0f5ef0938f9ee32726b071b2	dll		Heodo
2022-04-01 15:48:14	088670b2ad2bf84e0a051ba6b5d4250842a4ce7e958d14f10ee72c8e1d2bda39	dll		Heodo
2022-04-01 14:58:32	99f78a856972143aef500762e9357d59b0706bcf1e41e0c6949b7dac99688dc6	dll		Heodo
2022-04-01 14:32:42	8049004e3242866326c2cdbfb5b284dbb9431eadd4fbc839175aa4665f9d177f	dll		Heodo
2022-04-01 13:50:45	b432559a13573426729d58825e24e9d207295b5033ea13d161ad13df54608379	dll		Heodo
2022-04-01 12:23:37	50d0e29218735c9c60ff626996bb7451e3fef93c849b195bf5aace8cf9f26fac	dll		Heodo
2022-04-01 11:39:07	f992a1b1bddf5ad54ee31f9fa16de0dd831e3d7df2465731ddf5e8fc7cc7e211	dll		Heodo
2022-04-01 10:41:24	a1e0b19975a374bfa3d55648c61a768f11a279816e686d1e5bf8c0e63c9e2365	dll		Heodo
2022-04-01 10:28:49	226a8f0387eeef68824a0b6040c7644c6f194d8852e8bc56abb80918ce22e28b	dll		Heodo
2022-04-01 08:52:05	67d002fb1384095980f3e31545686a10fa9ea44f0c74f96972cffbe7b8aae719	dll		Heodo
2022-04-01 08:09:06	8c7a6c787e66eb46b52e6519d2b31eb08599f0e9793c38253f8480cefb7f7d79	dll		Heodo
2022-03-31 08:06:05	894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7	xlsm		Heodo
2022-03-31 07:32:24	894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7	xlsm		Heodo
2022-03-31 06:48:00	b0fa5dda99558a54917cc9a5f6269d440cd8b30ed825f72c837d6e4044d9f628	xlsm		Heodo
2022-03-31 06:43:19	97f11e4cd509aefb731d8b1a4b299c8ab4096e270f05f52d8e0eb6d2366fa501	xlsm		Heodo
2022-03-31 05:53:13	b034cfc88c6603dc0f5519ecba2dbba8c5382b26b8c25da23f8d40368ce8e7b5	xlsm		Heodo
2022-03-31 05:52:35	b034cfc88c6603dc0f5519ecba2dbba8c5382b26b8c25da23f8d40368ce8e7b5	xlsm		Heodo
2022-03-31 05:17:13	6102217f21897ac71dc164ee9cb69526d874d45e748754b44309ae2b1d620880	xlsm		Heodo
2022-03-31 05:04:58	a099f9c9c8eff7049da288a1205f1c0ccd52a4954930cabdd7a00dafbe8bbe6d	xlsm		Heodo
2022-03-30 23:30:30	39bbb570609ea300f9d959dcf23f2161043c6dedc230f97e7eab2388db651831	xlsm		Heodo
2022-03-30 23:09:42	39bbb570609ea300f9d959dcf23f2161043c6dedc230f97e7eab2388db651831	xlsm		Heodo
2022-03-30 22:30:18	687a158c15f9b76ec9b11906e548b587dcd7cd319e90477c89b1341f5d6b1ebe	xlsm		Heodo
2022-03-30 21:53:00	a635724502ddf792c6bc78f232c678f559b02ac1baa5cb61f924b6d2d7aeccd0	xlsm		Heodo
2022-03-30 21:41:34	168a9aa1b5fa37a354fd6ccba71dcd29cbcd503a578504c69feb38bd84a8a691	xlsm		Heodo
2022-03-30 21:10:34	02dcdf42ff1966a5e9b02308ee87de554cecdeb8e8bd8d58b6f95dccc8cd7e79	xls		Heodo
2022-03-30 20:57:39	31ad327541ee0627096151e901dee22241e584b78b52c17eee5a1c40a6f25490	xls		SilentBuilder
2022-03-30 20:34:51	3d1079de218293926fad741451c1633fbb0b9c99a67d4934c97eef854bf09616	xls		Heodo
2022-03-30 20:20:25	3493b3210a3ce325a05cc7da5ffc69d323e0a0a645d8bdfaf1016a2de52ee1b5	xls		SilentBuilder
2022-03-30 19:17:28	e6816092d6eb5bec7ab8d5463c45994379e212925e29994c9a28a826b9f0ee92	xls		SilentBuilder
2022-03-30 18:26:34	d5f2d5f02c59a803bf893a762e415bbc73fb5f9bf24595dfccc683b1a6a4276c	xls		SilentBuilder
2022-03-30 18:24:13	2ba33211dbb1821465ce7c7f6a909d39aa96f40ded8ddf32f7710400542876e1	xls		Heodo
2022-03-30 17:20:19	bdaa48d2231c1b2486ed207cdf3114a4df1292b4defcef137daabfe6bc8070a5	xls		SilentBuilder
2022-03-30 16:32:59	e611b90b8bc15c80bb5f0082078206905163b422bcd2afba293b7c1b673d7abf	xls		SilentBuilder
2022-03-30 15:31:58	6c3c1ceff2ee60d10947b652910cfe07a5a89db87ca507ef674e29e55d58a7a6	xls		SilentBuilder
2022-03-30 14:20:40	7143175fc3b45a138566f093a1985efc2564810ae4d8b541b63ec7570f121339	xls		Heodo
2022-03-30 13:59:44	061216d57577da5b9c7c95e57d26f695be2a2c7be18b94baf676719e6be08d66	xls		SilentBuilder
2022-03-30 13:03:05	1f4abd57d6305167ea781e255bf801474d77d7415dc16bfa03bcd9c6afb8e977	xls		SilentBuilder
2022-03-30 12:11:35	bfc4346b81b8cab420b161be78ca4bb5c5451f4342fe4334900389f56b8bdfcc	xls		SilentBuilder
2022-03-30 11:04:34	2b82324426c06592a76bf7c5c8aa1dee1ce453a2735ecdb3d54a179a452bc4b9	xls		SilentBuilder
2022-03-30 10:23:12	9ac2d9b09fb438722746956ab539706646f6999e4f41d608a15e5d7be2f03a6f	xls		SilentBuilder
2022-03-30 09:29:37	4d57182432ade39fbabce23e685ff21cc1d6cf5966f8bf69e222d84d6c2176e4	xls		SilentBuilder
2022-03-30 09:03:08	ed919e7317e9edb91eb7468e26cad1b08ecd328cfb669e1fb95bc2f3171b2ec8	xls		SilentBuilder
2022-03-30 07:49:50	fc11990e224dccd621a3e096de9d3ba9ea970ea8434a56a20ff5dbf00ac1bd90	xls		SilentBuilder
2022-03-30 07:06:41	905937ee43f2fc5221d18f42e0e1b2514bd1059016ddac70a5fe00c2092cf34a	xls		SilentBuilder
2022-03-30 06:07:00	60c10b6c651a9926b3b26455439340955ed88932bfbe0b5908534088eeb92037	xls		SilentBuilder
2022-03-30 05:15:25	562cb8922d82b50caf2e7452a6db106849432c9577c62aca3f1fd5fe90cd5308	xls		SilentBuilder
2022-03-30 04:21:09	5d07768d877f9d761c1fe49cf016d97f4195d6d138a24dd6d936faa5654ce764	xls		SilentBuilder
2022-03-30 03:42:37	9e011d77b179dc3075654faa2f570ff83e31cb879ef14891e49805831790a329	xls		SilentBuilder
2022-03-30 02:38:18	48de62f0ea202f9f6a63f26983545a5c456251ffe79dc9d394d8a599c8069208	xls		SilentBuilder
2022-03-30 02:06:51	795d1cb7302f7f2d226a7a50f9a1dfaca81c320aabc71f47113736bc0712a6a7	xls		SilentBuilder
2022-03-30 00:57:17	8e9245a7ff1bf4c43cee8e3b568af8044010cbaa655b23ea98c86a5ac18ca472	xls		SilentBuilder
2022-03-30 00:14:05	b8d670ca1984f7ecc9e90c4bc0c4c4d96172690aead7080171735f96c11ba21f	xls		SilentBuilder
2022-03-29 23:56:00	a7d32a6ad1390861e427965afd7fdab97df7cfc63b6eee10247c5e03d6e83bd1	xls		SilentBuilder
2022-03-29 22:43:26	cf32dd8b34af56ba98e8e60de33e463349578b7c5f034c6b5394c1de65d8b3bb	xls		SilentBuilder
2022-03-29 22:02:25	3e97f09fc53890ba2d5ae2539b5c8df372ed2506ed217d05ff2cf8899d15b8e6	xls		SilentBuilder
2022-03-29 21:18:02	ed2f8d7e4690bad774218068fb147924da6ac0dc68f5329699e01075b866a262	xls		SilentBuilder
2022-03-29 20:57:46	bc35c9548837ac5fe336c7e42965272c5bc571c06c2bff143deba56cfdcf8f3b	xls		SilentBuilder
2022-03-29 20:06:06	11e85a3bcab8d5d4f43929a8cf0783d612f20f10f38a0d84e702f110e149e565	xls		SilentBuilder
2022-03-29 19:22:06	d35e74f5e8250188d382b47a3c7a6804501f2ba7830d3ff47597207256487ee0	xls		Heodo
2022-03-29 18:16:38	fed653b6d6b107a271c13302a2df3109edc3833db5d2b947f0471fe97b2a0ba0	xls		Heodo
2022-03-29 17:42:12	86b13aa1fccdc55676730cebc42451a0b238f65af9d6c2b47d6f91508e4b626e	xls		SilentBuilder
2022-03-29 17:03:32	d95969e51a63d943f36d9d5189079e570a3d5eefa5abb6c24c243ca139b5788d	xls		SilentBuilder
2022-03-29 16:16:04	04875c7681484f64bb4bfa3232a4892a93e00c148b57a96030400caafd1168d6	xls		SilentBuilder
2022-03-29 16:16:04	779f33e076ff9f2ebb0e3cb638cc87141f9511f771bdf08f27877b1f8649a6d4	html