URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: alfatec.es
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-08-27 05:05:33 UTC
Total malware sites :1
A record(s) observed :2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 15:18:00 89.248.96.114host.xetar.comNot listedAS48348 cloudbuilders- ESyes
2020-08-27 05:06:03 89.248.96.102host.xetar.comNot listedAS48348 cloudbuilders- ESno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-08-27 05:06:03https://alfatec.es/ppq2/Overview/4829108180/ndv...Offlinedoc emotet ext epoch3 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-08-27 06:02:19021d2338b8a706fbd77f04cf43db3bf9dea03a1afff732ece042614c35e369eddocHeodo
2020-08-27 05:47:37518cef1391f1fd9cabab66c2c32f6ee1428a399147f181ff433baefecb0e8c45docHeodo
2020-08-27 05:30:327f33bcae335d18da18a8cd7474dffc2399131f6e66ce9e7a8099718810cdd350docHeodo
2020-08-27 05:17:306618ae9fbbf615266ce3a04226305b4569758644d9bab2b4c4b4f116c96855b4docHeodo