############################################################################## # URLhaus ASN CSV Feed # # Generated on 2025-08-02 09:05:48 UTC # # # # For questions please refer to: # # https://urlhaus.abuse.ch/feeds/ # ############################################################################## # # Feed generated for AS48324 # # Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country "2025-06-20 15:00:32","https://demokratieinbergen.de/?u=script","offline","malware_download","js|strelastealer|svg","demokratieinbergen.de","185.30.32.156","48324","DE" "2025-03-02 20:17:19","https://first-security-verden.de/","online","malware_download","censys|ClickFix|FakeCaptcha|html","first-security-verden.de","185.30.32.51","48324","DE" "2025-03-02 20:17:18","https://www.first-security-verden.de/","online","malware_download","censys|ClickFix|FakeCaptcha|html","www.first-security-verden.de","185.30.32.51","48324","DE" "2023-10-22 15:22:05","https://rz-menden.de/save.php","offline","malware_download","","rz-menden.de","185.30.32.144","48324","DE" "2023-09-27 05:23:11","https://limbus-holding.de/comments.php","offline","malware_download","gating|gootloader","limbus-holding.de","185.30.32.243","48324","DE" "2022-01-18 11:19:10","https://simplyjoy.de/wp-admin/BXkQb8cDm3IwpYo9/","offline","malware_download","emotet|epoch4|redir-doc|xls","simplyjoy.de","185.30.32.169","48324","DE" "2022-01-18 11:19:05","https://simplyjoy.de/wp-admin/BXkQb8cDm3IwpYo9/?i=1","offline","malware_download","doc|emotet|epoch4|Heodo|SilentBuilder","simplyjoy.de","185.30.32.169","48324","DE" "2021-07-04 06:52:09","https://www.autolilienfeld.de/wp-includes/main/Host_blDZMi67.bin","offline","malware_download","encrypted|GuLoader","www.autolilienfeld.de","185.30.32.71","48324","DE" "2021-07-04 06:52:03","http://mason-restaurant.de/wp-includes/back/Host_blDZMi67.bin","offline","malware_download","encrypted|GuLoader","mason-restaurant.de","185.30.32.97","48324","DE" "2021-07-01 06:29:08","http://mason-restaurant.de/wp-includes/back/Host_okNSlsM104.bin","offline","malware_download","encrypted|GuLoader","mason-restaurant.de","185.30.32.97","48324","DE" "2021-04-30 14:03:11","https://unimog-frontkraftheber.de/wp-content/plugins/wp-edit/plugins/abbr/n9ne0g0lvd7.php","offline","malware_download","Dridex","unimog-frontkraftheber.de","185.30.32.128","48324","DE" "2021-01-23 01:59:03","https://schmuckfedern.info/reference/0HlBBg8/","offline","malware_download","emotet|epoch3|exe","schmuckfedern.info","185.30.32.125","48324","DE" "2021-01-22 15:43:03","https://www.schmuckfedern.info/reference/0HlBBg8/","offline","malware_download","emotet|epoch3|exe|Heodo","www.schmuckfedern.info","185.30.32.125","48324","DE" "2021-01-20 19:55:04","https://schmuckfeder.net/reference/ubpV/","offline","malware_download","emotet|epoch2|exe","schmuckfeder.net","185.30.32.125","48324","DE" "2021-01-20 14:39:05","https://www.schmuckfeder.net/reference/ubpV/","offline","malware_download","emotet|epoch2|exe|Heodo","www.schmuckfeder.net","185.30.32.125","48324","DE" "2020-12-22 17:25:04","https://dj.4zido.de/i/612BRNn/","offline","malware_download","doc|emotet|epoch2|Heodo","dj.4zido.de","185.30.32.12","48324","DE" "2020-09-05 00:08:04","http://iburg24.de/assets/paclm/nc7h82jsa88h/mt613773365669ouc9gwk22o/","offline","malware_download","doc|emotet|epoch2|Heodo","iburg24.de","185.30.32.76","48324","DE" "2020-09-03 05:04:15","http://iburg24.de/assets/http:/Reporting/4UEUC0lRGGQk/","offline","malware_download","doc|emotet|epoch1|Heodo","iburg24.de","185.30.32.76","48324","DE" "2020-09-02 23:45:34","http://iburg24.de/assets/http://Reporting/4UEUC0lRGGQk/","offline","malware_download","doc|emotet|epoch1|heodo","iburg24.de","185.30.32.76","48324","DE" "2020-09-02 21:39:38","http://oli-materlik.de/live/wjeos17/","offline","malware_download","emotet|epoch3|exe|Heodo","oli-materlik.de","185.30.32.249","48324","DE" "2020-08-20 11:31:03","http://rupert-mueller.de/_private/public/pqlr3jpu/","offline","malware_download","doc|emotet|epoch2|heodo","rupert-mueller.de","185.30.33.102","48324","DE" "2020-08-13 17:40:45","https://drlabbe-kleve.de/wp-admin/WhNG/","offline","malware_download","doc|emotet|epoch3|Heodo","drlabbe-kleve.de","185.30.32.129","48324","DE" "2020-08-10 10:19:05","http://web98.s131.goserver.host/wp-admin./parts_service/kj5qh6/","offline","malware_download","doc|emotet|epoch2|heodo","web98.s131.goserver.host","185.30.32.131","48324","DE" "2020-07-21 22:43:31","https://neroh-automobile.de/wp-content/closed_box/corporate_forum/tdgbP3_ucm3pNczq8/","offline","malware_download","doc|emotet|epoch1|Heodo","neroh-automobile.de","185.30.32.250","48324","DE" "2020-07-17 20:15:17","https://computerfamilie.com/wp-admin/sites/5zbl583454520034794wvuqb80aka/","offline","malware_download","doc|emotet|epoch2|Heodo","computerfamilie.com","185.30.32.146","48324","DE" "2020-07-17 20:14:11","http://benjamin-jauernig.de/bilder/parts_service/","offline","malware_download","doc|emotet|epoch2|Heodo","benjamin-jauernig.de","185.30.32.146","48324","DE" "2020-07-17 16:11:05","http://web86.s146.goserver.host/hk9jj/CchogvhEi/","offline","malware_download","doc|emotet|epoch3|Heodo","web86.s146.goserver.host","185.30.32.146","48324","DE" "2020-07-17 15:58:53","http://ulfhorror.com/wp-admin/83279465106718/7fkhh84265327972167057acuknjrmhrfbxz9bdd/","offline","malware_download","doc|emotet|epoch2|heodo","ulfhorror.com","185.30.32.146","48324","DE" "2020-07-17 15:25:13","https://doraflob.com/fef2/Document/","offline","malware_download","doc|emotet|epoch2|heodo","doraflob.com","185.30.32.146","48324","DE" "2020-05-14 05:04:06","http://web23.s213.goserver.host/takzvcdfwuwz/LoanAgreement_751970_05122020.zip","offline","malware_download","ESP|geofenced|Qakbot|Quakbot|zip","web23.s213.goserver.host","185.30.32.213","48324","DE" "2020-05-14 05:03:34","http://web23.s213.goserver.host/takzvcdfwuwz/LoanAgreement_45240703_05122020.zip","offline","malware_download","ESP|geofenced|Qakbot|Quakbot|zip","web23.s213.goserver.host","185.30.32.213","48324","DE" "2020-02-06 07:42:20","http://web23.s170.goserver.host/tmp/dz3c5ars-2zpnzzj69-298/","offline","malware_download","emotet|epoch3|exe|heodo","web23.s170.goserver.host","185.30.32.170","48324","DE" "2020-02-03 22:56:08","http://web23.s170.goserver.host/tmp/4UhD7X_X9suGgKdCRompi_D6hWTy_NA0simZS/guarded_space/9bltvtp8_74wt3w3w19t9x7/","offline","malware_download","doc|emotet|epoch1|Heodo","web23.s170.goserver.host","185.30.32.170","48324","DE" "2020-01-28 13:05:52","https://enjoy-aquaristik.de/wp-includes/ns0bte-kwucm83l-732927/","offline","malware_download","emotet|epoch3|exe|Heodo","enjoy-aquaristik.de","185.30.32.70","48324","DE" "2020-01-24 01:59:04","https://apotheke-kitnalta.de/backup/mVTqp/","offline","malware_download","doc|emotet|epoch3|heodo","apotheke-kitnalta.de","185.30.32.166","48324","DE" "2020-01-24 01:22:06","https://praxis-voldyner.de/wxds/qmSitSr/","offline","malware_download","doc|emotet|epoch3|Heodo","praxis-voldyner.de","185.30.32.141","48324","DE" "2020-01-24 01:12:03","https://in-vino-davide.de/administrator/payment/5hw5-887-2732930-mxwlv8dgjs6-ydkv/","offline","malware_download","doc|emotet|epoch2|heodo","in-vino-davide.de","185.30.32.68","48324","DE" "2020-01-24 01:07:03","https://tagespflege-posthausen.de/installation_akb19/OCT/","offline","malware_download","doc|emotet|epoch2|heodo","tagespflege-posthausen.de","185.30.32.153","48324","DE" "2020-01-24 00:57:03","https://mt-bau.info/includes/lm/8a6p0i/20qj-935445-15-tnkmy-81zf4vtmuyr5/","offline","malware_download","doc|emotet|epoch2|heodo","mt-bau.info","185.30.32.167","48324","DE" "2020-01-24 00:28:03","https://tagespflege-ahausen.de/installation_akb19/INC/9zhxum1jmwz/rzbob-161173-69174464-qm5ud-h8cekb/","offline","malware_download","doc|emotet|epoch2|heodo","tagespflege-ahausen.de","185.30.32.153","48324","DE" "2020-01-23 08:05:24","https://rotenburg-tagespflege.de/installation_akb19/available_izVu6uH_0qCfxio3SeJW8p/test_20851778_Kpc2OoZ/PGfQTGGF_xko06whboI/","offline","malware_download","doc|emotet|epoch1|Heodo","rotenburg-tagespflege.de","185.30.32.153","48324","DE" "2020-01-22 18:57:34","http://pomodario.de/byxps2g/OCT/f0apdzl-0880311856-807644006-sh3jrra2en-vce7q/","offline","malware_download","doc|emotet|epoch2|heodo","pomodario.de","185.30.32.68","48324","DE" "2020-01-22 15:30:39","http://web95.s153.goserver.host/nkiw/KHIxG951/","offline","malware_download","emotet|epoch1|exe|Heodo","web95.s153.goserver.host","185.30.32.153","48324","DE" "2020-01-22 11:03:05","http://wuerfelmedia.de/components/Reporting/3weanbgh3/","offline","malware_download","doc|emotet|epoch2|heodo","wuerfelmedia.de","185.30.32.65","48324","DE" "2020-01-22 10:22:06","http://web222.s167.goserver.host/8rhp28j/OCT/gvnskmduagua/q6um-984602-1259993-24jtq3r-ktzxmrvu4uv/","offline","malware_download","doc|emotet|epoch2|heodo","web222.s167.goserver.host","185.30.32.167","48324","DE" "2020-01-22 10:18:07","http://web49.s141.goserver.host/0gbbhms8/iPh/","offline","malware_download","doc|emotet|epoch3|Heodo","web49.s141.goserver.host","185.30.32.141","48324","DE" "2020-01-22 10:16:05","http://davalfranco.com/docs/lc0eddn1/p6kesxw-240737257-6664-rja3rns814v-dmib8/","offline","malware_download","doc|emotet|epoch2|heodo","davalfranco.com","185.30.32.68","48324","DE" "2020-01-22 10:11:04","http://saradavalfranco.com/pjnh9b/payment/hd6yarzjr/fy1-7544-837645-xz48rx0c-2nzh/","offline","malware_download","doc|emotet|epoch2|heodo","saradavalfranco.com","185.30.32.68","48324","DE" "2020-01-21 22:32:05","https://kitnalta-versandapotheke-shop.de/backup/MDLFRR/","offline","malware_download","doc|emotet|epoch3|Heodo","kitnalta-versandapotheke-shop.de","185.30.32.166","48324","DE" "2020-01-21 19:56:03","https://apotheke-kitnalta.de/backup/public/zn2jptonki/","offline","malware_download","doc|emotet|epoch2|heodo","apotheke-kitnalta.de","185.30.32.166","48324","DE" "2020-01-21 19:30:21","https://in-vino-davide.de/administrator/rZzxHL_GcHRzN3MT_AVCp_SvNiTUrRzK40vN/o8y93j_wwv7im_warehouse/oudqqxt8lq_63x8w6/","offline","malware_download","doc|emotet|epoch1|Heodo","in-vino-davide.de","185.30.32.68","48324","DE" "2020-01-21 19:19:03","https://praxis-voldyner.de/backup/private-box/w5p7f-n00fsf4mozjzycc-lvenx33k-bkxl29xnwzpg8b/426917048-GxYp31/","offline","malware_download","doc|emotet|epoch1|Heodo","praxis-voldyner.de","185.30.32.141","48324","DE" "2020-01-21 19:18:03","https://tagespflege-posthausen.de/installation_akb19/FILE/1v2d9y6/","offline","malware_download","doc|emotet|epoch2|heodo","tagespflege-posthausen.de","185.30.32.153","48324","DE" "2020-01-21 19:01:05","https://mt-bau.info/includes/browse/","offline","malware_download","doc|emotet|epoch2|heodo","mt-bau.info","185.30.32.167","48324","DE" "2020-01-21 18:06:05","http://ralphlehmberg.de/components/personal_module/corporate_profile/UBGxpbv_aGbkl02N/","offline","malware_download","doc|emotet|epoch1|Heodo","ralphlehmberg.de","185.30.32.45","48324","DE" "2020-01-21 17:46:08","https://tagespflege-ahausen.de/installation_akb19/personal-array/408041858355-7JOYpFUG-space/gjltfqum1h8kf42-9tvv7748991/","offline","malware_download","doc|emotet|epoch1|Heodo","tagespflege-ahausen.de","185.30.32.153","48324","DE" "2020-01-21 17:19:04","https://kitnalta-pharma.de/backup/balance/jt6tf-058160-62-e0cb86m8-3fy03qjw/","offline","malware_download","doc|emotet|epoch2|heodo","kitnalta-pharma.de","185.30.32.166","48324","DE" "2020-01-17 10:58:02","http://web89.s203.goserver.host/wp-admin/browse/fsf0-99690241-87838-7lzi8bb3j-7ujguzkh/","offline","malware_download","doc|emotet|epoch2|heodo","web89.s203.goserver.host","185.30.32.203","48324","DE" "2019-12-12 11:49:04","http://letsplaydeveloper.de/wp-admin/qk9w6qf-x1ibkbd-736/","offline","malware_download","doc|emotet|epoch3|heodo","letsplaydeveloper.de","185.30.32.26","48324","DE" "2019-12-12 11:41:04","https://bituup.com/old/rRCyihZ/","offline","malware_download","doc|emotet|epoch3|heodo","bituup.com","185.30.32.196","48324","DE" "2019-12-12 11:23:02","http://knutschbienchen.de/wp-admin/DOC/mmn0q-397625-1715-bm6wet1v-n7xyt2zh6/","offline","malware_download","doc|emotet|epoch2|heodo","knutschbienchen.de","185.30.32.196","48324","DE" "2019-12-12 11:19:03","https://belz-development.de/css/parts_service/flhbw087620/","offline","malware_download","doc|emotet|epoch2|heodo","belz-development.de","185.30.32.196","48324","DE" "2019-12-12 11:11:14","https://cloud.belz-development.de/settings/Documentation/n3xl63bdl00a/6mlh9-705973393-218359-bj7wwq-43qarcx/","offline","malware_download","doc|emotet|epoch2|heodo","cloud.belz-development.de","185.30.32.196","48324","DE" "2019-12-12 11:10:05","http://energie-strom.net/cgi-bin/UpW/","offline","malware_download","doc|emotet|epoch3|heodo","energie-strom.net","185.30.32.23","48324","DE" "2019-06-21 09:04:03","http://web91.s139.goserver.host/1c.jpg","offline","malware_download","exe|Troldesh","web91.s139.goserver.host","185.30.32.139","48324","DE" "2019-05-31 21:18:02","http://architektbender.de/cgi-bin/47th13zycwiq0vkd34gwruh3im4_b3ofdnp-216731955/","offline","malware_download","doc|emotet|epoch2|Heodo","architektbender.de","185.30.32.199","48324","DE" "2019-05-10 17:28:18","http://tosama.de/templates/jsn_artista_pro/js/inf.inf","offline","malware_download","exe|ransomware|shade|troldesh","tosama.de","185.30.32.43","48324","DE" "2019-05-10 15:48:21","http://stock-footage-free-europe.com/www.stock-footage-free-india.com/EN_US/Clients/05_19/","offline","malware_download","emotet|epoch1","stock-footage-free-europe.com","185.30.32.220","48324","DE" "2019-04-29 12:25:26","https://www.hennpress.de/wp-admin/service/nachpr/04-2019/","offline","malware_download","doc|emotet|epoch1|Heodo","www.hennpress.de","185.30.32.231","48324","DE" "2019-04-24 14:53:02","http://municipalityofraqqa.com/add_post_auto/Document/HS7z4tGQZMPR/","offline","malware_download","Emotet|Heodo","municipalityofraqqa.com","185.30.32.149","48324","DE" "2019-04-23 16:26:02","https://etoiledumidi.de/wp-content/SYmYj-vUf81CaTTM0Q1UT_XOlTGJhBX-rs/","offline","malware_download","doc|emotet|epoch1|Heodo","etoiledumidi.de","185.30.32.96","48324","DE" "2019-04-22 13:55:06","http://municipalityofraqqa.com/wp-content/VNGm-Y8YccKsSKgJ8qq_JqtvpnFf-mD/","offline","malware_download","doc|emotet|epoch1|Heodo","municipalityofraqqa.com","185.30.32.149","48324","DE" "2019-04-02 06:30:14","http://flysrilanka.de/wp-content/sec.myacc.send.biz/","offline","malware_download","Emotet|Heodo","flysrilanka.de","185.30.32.71","48324","DE" "2019-03-12 11:25:12","https://deytona.de/templates/keyconcept/html/com_content/article/reso.zip","offline","malware_download","js|Ransomware|RUS|Troldesh|zip","deytona.de","185.30.32.9","48324","DE" "2019-03-12 09:54:02","http://deytona.de/templates/keyconcept/html/com_content/article/messg.jpg","offline","malware_download","exe","deytona.de","185.30.32.9","48324","DE" "2019-03-12 08:59:03","http://deytona.de/templates/keyconcept/html/com_content/article/msg.jpg","offline","malware_download","exe","deytona.de","185.30.32.9","48324","DE" "2019-03-12 01:36:28","https://deytona.de/templates/keyconcept/html/com_content/article/kia.zip","offline","malware_download","js|RUS|Troldesh|zip","deytona.de","185.30.32.9","48324","DE" "2019-03-12 01:31:24","https://deytona.de/templates/keyconcept/html/com_content/article/major.zip","offline","malware_download","js|RUS|Troldesh|zip","deytona.de","185.30.32.9","48324","DE" "2019-02-14 10:48:05","https://www.hiwentis.de/wp-content/themes/Anthem/js/messg.jpg","offline","malware_download","exe","www.hiwentis.de","185.30.32.164","48324","DE" "2019-02-14 10:23:06","http://hiwentis.de/wp-content/themes/Anthem/js/messg.jpg","offline","malware_download","exe","hiwentis.de","185.30.32.164","48324","DE" "2019-02-11 11:52:02","http://web55.s162.goserver.host/DE/IZCMWPOIQ1294729/GER/RECHNUNG/","offline","malware_download","Emotet|Heodo","web55.s162.goserver.host","185.30.32.162","48324","DE" "2019-02-07 10:59:03","http://web55.s162.goserver.host/ISUPDHWMOQ7542663/Rechnungs-Details/Fakturierung/","offline","malware_download","Emotet|Heodo","web55.s162.goserver.host","185.30.32.162","48324","DE" "2019-01-29 08:39:35","http://web113.s152.goserver.host/FmsBK-f2jt_Tf-Oey/COMET/SIGNS/PAYMENT/NOTIFICATION/01/26/2019/En_us/8-Past-Due-Invoices/","offline","malware_download","doc|emotet|heodo","web113.s152.goserver.host","185.30.32.152","48324","DE" "2019-01-24 01:04:48","http://web113.s152.goserver.host/Payment_details/2019-01/","offline","malware_download","doc|emotet|epoch1|Heodo","web113.s152.goserver.host","185.30.32.152","48324","DE" "2019-01-23 11:23:37","http://web63.s150.goserver.host/Januar2019/AGTJPOD8031288/Rechnung/Zahlung/","offline","malware_download","emotet|epoch2|Heodo","web63.s150.goserver.host","185.30.32.150","48324","DE" "2019-01-21 22:51:04","http://web113.s152.goserver.host/oDTCp1bNQ42L/","offline","malware_download","emotet|epoch2|exe|Heodo|Tinba","web113.s152.goserver.host","185.30.32.152","48324","DE" "2019-01-21 14:36:58","http://web63.s150.goserver.host/De/HVAIXTXKE8593138/Rech/RECHNUNG/","offline","malware_download","doc|emotet|epoch2|Heodo","web63.s150.goserver.host","185.30.32.150","48324","DE" "2019-01-17 21:34:36","http://web63.s150.goserver.host/Amazon/EN/Attachments/012019/","offline","malware_download","emotet|epoch1|Heodo","web63.s150.goserver.host","185.30.32.150","48324","DE" "2019-01-17 17:28:16","http://web113.s152.goserver.host/Amazon/En/Orders_details/2019-01/","offline","malware_download","emotet|epoch1|Heodo","web113.s152.goserver.host","185.30.32.152","48324","DE" "2019-01-15 23:38:24","http://web63.s150.goserver.host/IuYWK-GT_y-jL7/EXT/PaymentStatus/US/Companies-Invoice-1236003/","offline","malware_download","doc|emotet|epoch2|Heodo","web63.s150.goserver.host","185.30.32.150","48324","DE" "2018-07-21 08:18:43","https://loens-apotheke-im-facharztzentrum-verden.de/3aslwBczTC","offline","malware_download","emotet|exe|heodo","loens-apotheke-im-facharztzentrum-verden.de","185.30.32.63","48324","DE" "2018-06-15 15:31:44","http://nagel-web.com/OpFpaglan/","offline","malware_download","","nagel-web.com","185.30.32.157","48324","DE" "2018-06-15 15:31:43","http://nagel-web.com/MMIY738493/","offline","malware_download","Heodo","nagel-web.com","185.30.32.157","48324","DE" "2018-06-01 15:01:19","http://rudbert.de/Facture-impayee/","offline","malware_download","doc|emotet|Heodo","rudbert.de","185.30.32.203","48324","DE" "2018-04-11 19:56:06","http://luckylohn.de/Outstanding-Invoices/","offline","malware_download","doc|emotet|heodo","luckylohn.de","185.30.32.146","48324","DE" # of entries: 95