URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host gonenyapi.com.tr.

Database Entry

Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-06-13 13:51:22 UTC

IP addresses

The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-06-01 07:19:06185.9.156.86mana6.hostmana.comNot listedAS57844 SALAY- TRno
2018-06-13 13:51:2492.42.32.11linux.inetmar.comNot listedAS49467 EUROTA-ASN EUROTA INTERNET SERVICES LTD- TRyes

Malware URLs

The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-06-14 06:01:58http://gonenyapi.com.tr/IRS-Letters-June-2018-08D/2Offlinedoc emotet heodo Clean@DecayPotato
2018-06-14 06:01:57http://gonenyapi.com.tr/STATUS/New-Invoice-ZZ8572-IW-18590Offlinedoc emotet heodo Clean@DecayPotato
2018-06-13 13:51:24http://gonenyapi.com.tr/IRS-Letters-June-2018-08D/2/Offlinedoc emotet epoch2 heodo Clean@JRoosen