URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	tunamusavirlik.com
Domain registrar:	Isimtescil Bilisim
Domain registration date:	2017-01-03 14:49:15 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-06-27 12:51:03 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-06-27 12:51:07	93.89.224.158	93-89-224-158.fbs.com.tr	Not listed	AS51557 TR-ISIMTESCIL-20201202	TR	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-06-27 14:47:04	http://tunamusavirlik.com/media/Hlnay.exe	Offline	32 exe zgRAT	zbetcheckin
2022-06-27 14:41:06	http://tunamusavirlik.com/media/Dzqebr.exe	Offline	BluStealer	JustaguyAA
2022-06-27 14:41:06	http://tunamusavirlik.com/media/MT_6338129.exe	Offline	32 AgentTesla exe	zbetcheckin
2022-06-27 14:41:05	http://tunamusavirlik.com/media/uu.exe	Offline	32 exe	zbetcheckin
2022-06-27 12:51:07	http://tunamusavirlik.com/media/Re-order30610.exe	Offline	AgentTesla	Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-06-27 14:47:04	11a0ce29039c84a48dbb4ea8c86a67480abe772fbd71127a3d031609daf6f35c	exe		zgRAT
2022-06-27 14:41:06	6d4d8c1efabcea0bd4f763950acd0274bf0c72b6f4d2c9e6ecba7a26280de45d	exe		BluStealer
2022-06-27 14:41:06	6ee2e74be944e02f47b9786593b033de235731d04cb9d599f637bd526344d08a	exe		AgentTesla
2022-06-27 14:41:05	9bd4aeef3b523a2046c1f76ae4c6d3af54c7efe233aed7f5639323c48deed942	exe
2022-06-27 12:51:04	9017c3928704aa1afe732138de8012d6e9b6f1f8cc7d65550a146d6eee2de911	exe		AgentTesla