URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | www.gelisimcizgisi.com |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2019-10-23 19:16:00 UTC |
| Total malware sites : | 4 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 4 (100%) |
| A record(s) observed : | 7 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-08-22 04:38:26 | 207.207.210.23 | Not listed | AS16509 AMAZON-02 |  US | yes | |
| 2026-07-15 16:53:31 | 207.207.210.36 | Not listed | AS16509 AMAZON-02 | US | yes | |
| 2026-07-15 16:53:31 | 207.207.210.50 | Not listed | AS16509 AMAZON-02 | US | yes | |
| 2026-07-13 20:46:02 | 44.230.85.241 | ec2-44-230-85-241.us-west-2.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2026-07-13 20:46:02 | 52.33.207.7 | ec2-52-33-207-7.us-west-2.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2020-02-10 13:22:44 | 185.95.87.218 | ns4.hemensayfa.com | Not listed | AS51559 NETINTERNET |  TR | no |
| 2019-10-23 19:16:02 | 94.101.82.210 | server-94.101.82.210.as42926.net | Not listed | AS42926 RADORE | TR | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2019-12-18 05:28:04 | http://www.gelisimcizgisi.com/articles/swift/an... | Offline | doc emotet  epoch2 heodo |  spamhaus |
| 2019-12-10 21:24:09 | http://www.gelisimcizgisi.com/articles/817lp2-w... | Offline | doc emotet epoch3 heodo |  p5yb34m |
| 2019-11-01 19:07:59 | http://www.gelisimcizgisi.com/articles/nRdedmyD/ | Offline | doc emotet epoch2 heodo |  Cryptolaemus1 |
| 2019-10-23 19:16:02 | http://www.gelisimcizgisi.com/articles/wxpg6fk/ | Offline | emotet epoch2 exe heodo | Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-10-25 18:36:21 | 033db3f346e94c3cfdca8210a26a148506d53b5167b3cda4af1721116f38aa08 | exe | Heodo | |
| 2019-10-25 16:57:27 | c134c7e27fdc8a88d1a75775b41ebf13d5a66e42050d0dc39771455c05e02edf | exe | Heodo | |
| 2019-10-25 14:40:46 | 41e0ae1c1f3137cd6a63d4dd586388878c7df93b3c9ba314103fb00991c2da62 | exe | Heodo | |
| 2019-10-25 12:50:29 | 514f013d9848a19291a2cad493a3b3a5c2f37661ff1a713eb21716b39e5afb5e | exe | Heodo | |
| 2019-10-25 11:47:18 | bb09f54b5f0ebc879b1a9c39c8e387971ff1a2429674d10a1ed74e74736e2f75 | exe | Heodo | |
| 2019-10-25 07:43:31 | 5ed1d51382f493a1bd562f4716ab2b6029dda3d44587d2d3ae500e99bd1247c6 | exe | Heodo | |
| 2019-10-25 07:02:29 | d1deb7f8195050e4412311ad96980dccb50dcbf24b61e31af577104bee2877f4 | exe | Heodo | |
| 2019-10-25 05:16:37 | b17cb9569882ab3f112045f53221caf82166325ece975280d07bb38fd2d9edfb | exe | Heodo | |
| 2019-10-24 10:02:14 | ab264199a77bc7d6ecc258b5ce4a7437a7f2423e07a29cfc7721aa5894867820 | exe | Heodo | |
| 2019-10-23 19:16:01 | 5c138290815cf635fb9947f9753c73dac1dbd855a2153116cb0a3a4e6e07944a | exe | Heodo |