URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host www.yonetim.yonpf.com.

Database Entry

Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2019-01-02 08:13:04 UTC

IP addresses

The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-01-02 08:13:06109.232.216.175srvc174.turhost.comNot listedAS42807 AEROTEK-AS- TRno

Malware URLs

The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-02-20 21:00:04http://www.yonetim.yonpf.com:80/Rem5.exeOfflineexe payload stage2 Clean@shotgunner101
2019-02-20 20:59:43https://www.yonetim.yonpf.com:443/Rem5.exeOfflineexe payload stage2 Clean@shotgunner101
2019-02-20 20:59:26https://www.yonetim.yonpf.com/Rem5.exeOfflineexe payload stage2 Clean@shotgunner101
2019-01-21 06:10:04http://www.yonetim.yonpf.com/Rem5.exeOfflinerat remcos Clean@JRoosen
2019-01-02 11:16:02http://www.yonetim.yonpf.com/Test.exeOfflineexe Clean@de_aviation
2019-01-02 08:13:06http://www.yonetim.yonpf.com/Rem4.exeOfflineexe RemcosRAT Clean@zbetcheckin