URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host 5.u0148466.z8.ru.

Database Entry

Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-11-30 03:47:03

IP addresses

The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-11-30 03:47:04195.208.1.101std-carp1-http.nic.ruNot listedAS25535 ASN-RUCENTER-HOSTING- RUyes

Malware URLs

The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-12-07 23:09:10http://5.u0148466.z8.ru/Internal-Revenue-Service-Online-C...Offlinedoc emotet epoch2 heodo Clean@Cryptolaemus1
2018-12-07 13:10:20http://5.u0148466.z8.ru/Internal-Revenue-Service-Online-C...Offlineemotet epoch2 heodo Clean@Cryptolaemus1
2018-12-06 01:15:05http://5.u0148466.z8.ru/files/US/Need-to-send-the-attachm...Offlinedoc emotet epoch2 heodo Clean@Cryptolaemus1
2018-12-05 14:39:56http://5.u0148466.z8.ru/files/US/Need-to-send-the-attachmentOfflineemotet epoch2 heodo Clean@Cryptolaemus1
2018-11-30 03:47:04http://5.u0148466.z8.ru/En/Clients_Coupons/Offlinedoc emotet epoch1 heodo Clean@Cryptolaemus1