URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	3demon.biz
Domain registrar:	Tucows
Domain registration date:	2006-03-29 01:05:53 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-24 03:51:08 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-05-05 17:06:35	66.81.203.137		Not listed	AS40676 AS40676	VG	no
2023-02-26 07:29:05	208.73.209.42		Not listed	AS401348 DMNL-ASN-01	VG	no
2022-07-06 16:01:19	209.99.64.70	209-99-64-70.fwd.datafoundry.com	Not listed	AS23005 SWITCH-LTD	US	no
2022-06-17 16:15:20	173.208.184.58	adventure.bestwayfx.buzz	Not listed	AS32097 WII	US	no
2022-04-01 07:01:17	91.195.240.117		Not listed	AS47846 SEDO-AS	DE	no
2021-12-24 03:51:09	205.144.171.120	205-144-171-120.alchemy.net	Not listed	AS7296 AS-DYNASCALE-LAX	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-17 17:04:05	http://3demon.biz/2fh0g/AYHQB_079741/	Offline	emotet epoch5 redir-doc xls	sugimu_sec
2022-01-17 17:04:05	http://3demon.biz/2fh0g/AYHQB_079741/?i=1	Offline	doc emotet epoch5 heodo	sugimu_sec
2022-01-14 16:26:05	http://3demon.biz/2fh0g/5630UOCU_099413/	Offline	emotet epoch5 redir-doc	Cryptolaemus1
2022-01-14 16:26:05	http://3demon.biz/2fh0g/5630UOCU_099413/?i=1	Offline	ArkeiStealer doc emotet epoch5 heodo	Cryptolaemus1
2022-01-13 15:55:05	http://3demon.biz/2fh0g/24630_55/	Offline	emotet epoch5 redir-doc xls	waga_tw
2022-01-13 15:55:05	http://3demon.biz/2fh0g/24630_55/?i=1	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2022-01-12 02:07:05	http://3demon.biz/2fh0g/RVdtno_386567/?i=1	Offline	doc emotet epoch4 heodo SilentBuilder	Cryptolaemus1
2022-01-12 02:07:04	http://3demon.biz/2fh0g/RVdtno_386567/	Offline	emotet epoch4 redir-doc	Cryptolaemus1
2021-12-24 03:51:09	http://3demon.biz/box/bVj/	Offline	emotet epoch4 redir-doc xls	waga_tw

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-01-18 06:24:03	e95a1d9f8651d516e59ddffadc5fd94a499b888077d6cc60ee5cc1b95c1f91e7	xlsm		Heodo
2022-01-18 06:12:07	08ed773eaf043bb76b2576c9376b8715da6d2677f07277f709e74d4844343b7c	xlsm		Heodo
2022-01-18 05:36:05	8a1f1920da77f2aa02e0d38a92cc3f9901781484353db80e8940a750d673f023	xlsm		Heodo
2022-01-18 05:03:36	64d41354ecd7f297389d824c38b8b00241322769011feb0c864269145fd8f174	xlsm		Heodo
2022-01-18 04:54:03	5548e14a9b8742e7772ebe754d1e7c8bd00039714138ddb87d4fe2a8e92dd212	xlsm		Heodo
2022-01-18 04:37:43	1d95f9d613b01b2dcf2ff10254cf77e3210a07f1a209855de18043c161520191	xlsm		Heodo
2022-01-18 04:26:16	2fa3f98b356abd03728f0483564efe772cf7b96ad1b42fe1cbfb4a0298ac7b53	xlsm		Heodo
2022-01-18 04:11:54	ccbc039cf33ad86b9287d5ddeb42977c7b30bdf9e8a728478f7be2f0231c9310	xlsm		Heodo
2022-01-18 03:47:44	42671e33a5cd09da48d20b7a12e9d8c6b5c3e8e397deffd7d721f10e3c26c410	xlsm		Heodo
2022-01-18 03:30:33	0228ceafa8f9fb29813b9462d9aee85f346c43440aabab248ee3a28283eb4f6f	xlsm		Heodo
2022-01-18 03:12:51	58a1033b4773f07ae0f7257590bf372fde51e9bc60298c483a5bf53a93210433	xlsm		Heodo
2022-01-18 02:51:29	976872f868b49d98d5e487b42d9bce61f8b05d610fb794ccacbe1ca4274d71cd	xlsm		Heodo
2022-01-18 02:28:43	05e2970a2d23748d20962e6a506d75a8649a4f5c2b7a0dc7723c90680659f0c9	xlsm		Heodo
2022-01-18 02:11:39	954cce122bbc5f2db9b047be265ecb1c8dbbe04b37eaf5b2f738423610df2d4a	xlsm		Heodo
2022-01-18 02:03:19	72c3f7215a023270169a1f1a078c7df9714bdb4ab297fe3bfde6e13fbcb08c68	xlsm		Heodo
2022-01-18 01:50:22	bca263286c21f2647b4f0885a0848164685ab40aa0d758e94eb8d774d940c69d	xlsm		Heodo
2022-01-18 01:30:59	7a36780755f25695430762b1ae5759a6b789c298db856370cd0b6fd0f857f835	xlsm		Heodo
2022-01-18 01:12:46	e961e46fe0000505f4534e036a9d1d2a59823cf644438a2733ab659e9c22988b	xlsm		Heodo
2022-01-18 00:49:41	5b40663cd5694685107f64ce59209f23d87706238f5b564227a288fdf40749f6	xlsm		Heodo
2022-01-18 00:39:02	64b618a8cd97c14013cdb8352e6959b5f4097adfa9986a19e4a916141cccc9ad	xlsm		Heodo
2022-01-18 00:15:28	2fed78e7159614ab93c099805eda683afcb3a8a0efcb75d260f19202886700e3	xlsm		Heodo
2022-01-17 23:58:17	053bb9b9096198d542ba99d4aa0148e9af3797c17d2b874f406bf9d35749d809	xlsm		Heodo
2022-01-17 23:38:41	6f547f1af075434c1f8fd54fb78b5a4f15d49e4a38e86d6e129d88c3e83ea230	xlsm		Heodo
2022-01-17 23:18:54	b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83	xlsm		Heodo
2022-01-17 23:08:09	47c80c975818ab9bd09449d2130bcfb94eeab3b0aaaa784f5c2b56cc3d32c796	xlsm		Heodo
2022-01-17 22:48:27	f4bb1e4f32c5444db3de6d023a3e27ecd0b948e8b13b1d54d7c725ff63dbd7da	xlsm		Heodo
2022-01-17 22:41:01	1227b6464953ca3a4307804a94c248736f40446a42121d3e0ceb52fc63629f8a	xlsm		Heodo
2022-01-17 22:02:27	ffb2a0ff4ab817787bae6e304ecc561e2e839edd4d20194227a194e6e8bb7b0f	xlsm		Heodo
2022-01-17 21:56:05	2350f0180119d36193a0ff0d35370865e389ebf2b910fbfa8419c7a2258a9356	xlsm		Heodo
2022-01-17 21:34:09	d617e18915823ed787d6a6d05689a574c7286b6e0c1dccfda44870670679f7b5	xlsm		Heodo
2022-01-17 21:20:23	9994c128dac8fef0f5b7a94e7379a6eb0f2b3ab28cf8c641f2fecfc11a1100a9	xlsm		Heodo
2022-01-17 21:13:16	5951f2e9692548b9221f83d17d2495b963300952539c88355ebb9a7357076104	xlsm		Heodo
2022-01-17 20:48:46	5f80ad8d4e70c5637f41d10292d1e4e32063d5ece1f76bad7a612682cdfa4b32	xlsm		Heodo
2022-01-17 20:33:50	f9dea3630d24b95aefdc660fd8a9177b2af72080e7fefa48c86eb02756693208	xlsm		Heodo
2022-01-17 20:20:09	bb129e52a34554610dab76d4c4ca56c04d62af6df6db2663fe68e8367805250e	xlsm		Heodo
2022-01-17 20:03:15	5561c442628b59260698ebf2645820e36704856a4974246c8ca1f93e8b5203cb	xlsm		Heodo
2022-01-17 19:49:24	bac5bcbe06ad5a143b2d435de9c1e2074ba318eeaccec3c1e31ca60c1bd75463	xlsm		Heodo
2022-01-17 19:42:47	3a8f3b99f34a569a677b366f37af5485668d556b85970cf76c6d0fb009b5b6b4	xlsm		Heodo
2022-01-17 19:26:55	39875d1bd13a9725e4927c66b9446dfeaf91baa724b1a3ab6cffd030d63fcdb8	xlsm		Heodo
2022-01-17 19:17:08	190219458719434f62500232bdaff2d64739f2794b857b90f740e4b4acc9199b	xlsm		Heodo
2022-01-17 18:57:13	48493d15ecbcbe199bb069031dd2b2dc6fcee3baad249f61235c3ceb9cd7c33e	xlsm		Heodo
2022-01-17 18:35:35	64b0b3763be74c505f9da8476f3d06a1f995136e4bbf3158926cc2165f1fa967	xlsm		Heodo
2022-01-17 18:24:42	9fd076e3d8214023a2c4dd24dae3611c7d260f41db72dbf5eca2d37dc6cd25ef	xlsm		Heodo
2022-01-17 17:57:43	509adf48f1d34c9f19758904a9ed30240a16ef34f64ea4e6ad4b28b9284c4fc5	xlsm		Heodo
2022-01-17 17:48:22	130a3440d27d5f57af151858f121b978fc0c8e09b553ab84b9ca65a3a891187b	xlsm		Heodo
2022-01-17 17:30:07	73f6647b0a79a4263be93eeb815446f109fac19cdca575604ff683859a4c18e1	xlsm		Heodo
2022-01-17 17:21:26	6c7d0b65c32f54ee602ebbdb96d1112f99348bc1af781977328d531431c36b24	xlsm		Heodo
2022-01-17 17:04:05	55fc4b8c2e3f9db7f0c8f3fcfc0297b17c57c680c4c9df5006ed94196ff783de	xlsm		Heodo
2022-01-17 17:04:05	9129deb489cc8a19a0c090d411472b94c576782ab1c11f55c484f450210df45d	html
2022-01-15 16:37:32	680d593ae0a226450514340f2d25d21d11a531352895fc08a97be05de59d167b	xlsm		Heodo
2022-01-15 16:16:33	997944bfe4a5d45edf73261d12e35ba5fc410d620dc22478d63a36396c681191	xlsm		Heodo
2022-01-15 16:06:35	53d2adbdb3d287f6342e7b78df9fe6a1617bb75752951a454cd77501fe98b08c	xlsm		Heodo
2022-01-15 15:35:21	f75a08a379be0f82b2a834beb70b474b6dc129824ff96a27062bcbf86bb9132a	xlsm		Heodo
2022-01-15 15:19:38	2885ba40e909a11d8ad59c92aa9b3193ece177eae02a1f27c84eb340a7d7e7d1	xlsm		Heodo
2022-01-15 14:54:02	c0bb5e29bc8d4d4ecee84dce646364cf621d68661bb8f71b09d12a599067070c	xlsm		Heodo
2022-01-15 14:37:53	c1a965ede59ecf82604f9e28dea05524ca8c4c5f826c417c629bfbd5cb21602c	xlsm		ArkeiStealer
2022-01-15 14:17:41	2a70c101231eb32aa314f71ef0ac574379cc09ac745ab1837e11a1efda29c58d	xlsm		Heodo
2022-01-15 14:04:25	aad14c7063245eaa7cec884fdbf70fb9b202755952f6306a0a608bdae6f3f80c	xlsm		Heodo
2022-01-15 13:40:45	bcbfec96627a5752b950ad6161f23ddea6785a6c939e8ac2786275dfc4fa7fa8	xlsm		Heodo
2022-01-15 13:20:51	c0e635f40926c5c5d6202c9f73be4003c72eb3da1da7a4aef48cc4f9d59fc232	xlsm		Heodo
2022-01-15 12:59:50	f6ccf035b54828c77ee4b31ef7ced40b9eb86ad3fef6107356758afe9f20603c	xlsm		Heodo
2022-01-15 12:53:17	d7818be62c9a6e0eefdc0fd0a685debddaa7d58bdc9140d59be286e46b7bb766	xlsm		Heodo
2022-01-15 12:31:06	8a87fbe3b9242408d0e31783b71fde98d14e737723758665aff6775a60fd22de	xlsm		Heodo
2022-01-15 12:08:55	5aa56c5fc624ed3369f0f6f382cd9460c80de7758675d6c28f3aedd17baf1b7b	xlsm		Heodo
2022-01-15 11:43:37	59b33acb84e8dd6d711de8a559541650a6c8ebb01fcf0db0676b1136045bd440	xlsm		Heodo
2022-01-15 11:23:38	be942d6de6c231e6bc861c1e67b20cf20bde4a7b78751e26f4e779c0a67ca9ab	xlsm		Heodo
2022-01-15 11:07:41	dd2c0fe2695c9a23678226e60228715951f3a61a3ee3dd18d36c9fd420c88647	xlsm		Heodo
2022-01-15 10:46:47	b6b586b1c26a7264dcdb98835a99b42bac6a040f962f3e9b36f7a2d22515b65f	xlsm		Heodo
2022-01-15 10:15:57	d0209810287321712b7d094dce723b36cf1fdb8258c3b3c41b49b7684f854983	xlsm		Heodo
2022-01-15 10:01:23	45196a61f96ae34e0ca6711e70e1412b212242e79d3b0b7a32541cfda6938eee	xlsm		Heodo
2022-01-15 09:38:00	460f8a1daadf1518b1f27f19ce641ba92a1ae23c0452656a068e5f46bce16623	xlsm		Heodo
2022-01-15 09:26:19	d956d51c896100523138bc649194b56fea4da4499f148db37930b4b2aee39101	xlsm		Heodo
2022-01-15 08:58:54	7036b5af3647086ffe5272a4c48851f215d2faf6205b73c402acdc8f1629e8d3	xlsm		Heodo
2022-01-15 08:33:44	44b990e0cecfdbce9a3071b4b5a23cb9bfd7fbccb6fb5eb267b229a822c932b0	xlsm		Heodo
2022-01-15 08:15:05	d88a7ac3b8616da5e351a91188251a68584ec2d51a5c491c18f661a322ce9319	xlsm		Heodo
2022-01-15 08:00:24	c8ae806c1fad8007f17331fc0ea71d000140443e4596a430f7cd80332ac3c2cb	xlsm		Heodo
2022-01-15 07:48:49	3a65abf1b08c0b1d64979d349e28077ac40c68c38fd7f2581468337a6e5d848a	xlsm		Heodo
2022-01-15 07:21:33	d90488474a115987753f7d96f2810900bd6abfc52ac05aeed67710e18e0314ad	xlsm		Heodo
2022-01-15 07:05:00	af74adf2376ab0a8fb16735d44fc3e72bc4480a91b2cf9de85cd2f9ab7fe1fb5	xlsm		Heodo
2022-01-15 06:49:43	55609e9411de2aa6dca0995747f89cc0b89081e6722e497433da8f8d02e9a2f2	xlsm		Heodo
2022-01-15 06:23:26	c909891cc6ab3148cc2e5af0f42b18f4fea635079447729eba2203ffdbdf32d4	xlsm		Heodo
2022-01-15 06:02:06	1f93c92652672883150a833d6bdfdf434bde9d61121c95b4a0b77740afa8479c	xlsm		Heodo
2022-01-15 05:43:25	d103b5352273217cc252966b5d072c39b0340845aab3513ec3d17e07e1a5d410	xlsm		Heodo
2022-01-15 05:23:23	0090643800e1f49a41801bb84916471fe71b2778e2cef65930e5b25b3c62fc8d	xlsm		Heodo
2022-01-15 05:00:35	7a75b8d2c5567ef0c4fc7270b77c7deab2f2a81ea2f1b969f66d680a781b5065	xlsm		Heodo
2022-01-15 04:50:30	22f20d029b24272da77ea4b56a36a93a3f837d0d98cc207433d92f7eed14074e	xlsm		Heodo
2022-01-15 04:33:09	3f1cfeef21fce7cf3f2192145362411cc4384115f137db495cb8f6a39785e6ad	xlsm		Heodo
2022-01-15 04:00:23	db676ef714ea818edca3ff4a25da38808cbec2a6d7b944a237e44ad29d8932da	xlsm		Heodo
2022-01-15 03:44:54	7502d81e1850ddeca8f2a9b2b5b986b1402710ac10ba7247fa34dbde1e9f1399	xlsm		Heodo
2022-01-15 03:27:49	771e8eb9454d09d3f655f55713b1791583aaa6f813d896737b38d1da511fcb15	xlsm		Heodo
2022-01-15 03:08:57	d6d33e7076e3ff778ea32c349701dc2c599fc78d287883f2ad9c16a820386e37	xlsm		Heodo
2022-01-15 03:02:48	5d0cc537deee02adfdfc8d27167144f5c222745162c15df34803e67f09cd7f1f	xlsm		Heodo
2022-01-15 02:33:22	91f1fcbd97c98c8228da3ca85b422fc21a0efff0bd3299bb423d23ff15834d9f	xlsm		Heodo
2022-01-15 02:18:15	d23b6087f9c63fee7bf5d8e620cf88ca2c38fe8ee342deed923d705fa9b6d68c	xlsm		Heodo
2022-01-15 02:06:19	35101e24e0d9b97edc46d35011a21e505ee4b05036998544ad3dad3444e09376	xlsm		Heodo
2022-01-15 01:51:29	a59149fcacf8a5c564f48dc446b7cef1203a0ab92fec9dead2b3645bb24d3e51	xlsm		Heodo
2022-01-15 01:24:51	de54a7c99135db230ba151e513f7813ccca74b08201d7592958e82c51b152386	xlsm		Heodo
2022-01-15 01:13:15	b8121edc6cc2e93b9a7832beca7e11a32f3c0b8214816c8276a2d2eeec251050	xlsm		Heodo
2022-01-15 00:54:00	1f2fb274efe18ae6707db44fd5e92e99c9da494530658002e2443435536ad260	xlsm		Heodo
2022-01-15 00:39:46	f58905138f947e83a11dabe1d0fcacd0f6b6390a4b2c968f6de1e7f388ff5f1e	xlsm		Heodo