URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-08-09 05:32:07 | 94.73.148.122 | cpls31.srvpanel.com | Not listed | AS34619 CIZGI | TR | yes |
| 2019-05-29 21:27:00 | 94.73.147.113 | 94-73-147-113.cizgi.net.tr | Not listed | AS34619 CIZGI | TR | no |
| 2019-03-06 16:12:03 | 94.73.146.114 | 94-73-146-114.cizgi.net.tr | Not listed | AS34619 CIZGI | TR | no |
| 2025-08-09 05:32:07 | 85.159.66.93 | 85-159-66-93.cizgi.net.tr | Not listed | AS34619 CIZGI | TR | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2019-03-11 13:13:05 | http://trendendustriyel.com/wp-content/0hrhb-q3... | Offline | emotet | |
| 2019-03-08 16:31:11 | http://trendendustriyel.com/wp-content/4ybo-6e6... | Offline | emotet | |
| 2019-03-06 16:12:03 | http://trendendustriyel.com/wp-content/1b8n7-4a... | Offline | emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-03-11 22:14:45 | e69742e157bd0b2dc16aec06611d17972f1b733e8caff3f4234057580ac5edde | doc | Heodo | |
| 2019-03-08 22:13:11 | da1b47eb285b4a7c79c91c9f33b6a4088b8b03c175bc900669211b9949fd8b35 | docx |
TR