URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host gonenyapi.com.tr.

Database Entry


Host:gonenyapi.com.tr
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-06-13 13:51:22

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-06-13 13:51:2492.42.32.11linux.inetmar.comNot listedAS49467 EUROTA-ASN EUROTA INTERNET SERVICES LTD- TRyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-06-14 06:01:58http://gonenyapi.com.tr/IRS-Letters-June-2018-08D/2Offlinedoc emotet heodo Clean@DecayPotato
2018-06-14 06:01:57http://gonenyapi.com.tr/STATUS/New-Invoice-ZZ8572-IW-18590Offlinedoc emotet heodo Clean@DecayPotato
2018-06-13 13:51:24http://gonenyapi.com.tr/IRS-Letters-June-2018-08D/2/Offlinedoc emotet epoch2 heodo Clean@JRoosen