URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: amethystcourt.co.nz
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-10-16 22:15:10 UTC
Total malware sites :3
Online malware sites :0 (0%)
Offline Malware sites :3 (100%)
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-12-10 10:49:45 192.124.249.160cloudproxy10160.sucuri.netNot listedAS30148 SUCURI-SEC- USyes
2020-10-16 22:15:13 35.213.176.173173.176.213.35.bc.googleusercontent.comNot listedAS15169 GOOGLE- SGno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-10-31 04:42:05https://amethystcourt.co.nz/cgi-bin/Document/bZ...Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1
2020-10-22 11:52:05https://amethystcourt.co.nz/cgi-bin/lm/Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1
2020-10-16 22:15:13https://amethystcourt.co.nz/cgi-bin/925j22NcpqU...Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-10-31 04:42:050e1e46ba3515694253b3f5f7e14717477b8f5a0569237cb4bc87a65b954b8026docHeodo
2020-10-22 11:52:05039488b9c71e2e766329be6f4168cfd722d20fff1317c35c048babc57fa500abdocHeodo
2020-10-17 05:54:08294c6f87d8514072c30988bd55dd643c5c018b9f9ae05b9db1a97d034b31e092docHeodo
2020-10-17 05:19:14fd4a45974318a540bf249d7aa768f6d4ec1bb268bb05e5028935db34aff711f4docHeodo
2020-10-17 05:09:470f4e937ecf4435c0d84956b70e83ca82c0cd15fe9184709e7616c8cc60512590docHeodo
2020-10-17 04:16:01c8e0ee6566b5536ea46f25964313ce3c6d88ef6329133772236f4afe57bdacd4docHeodo
2020-10-17 03:53:312a71d0ad9193b9a5ec07c7040baf6aee1049bde63cdd81fdf346e9f295b95760docHeodo
2020-10-17 03:16:2090e7a0a9f215c30d103034801a89e4b61554c48bff10a98df0d09257cfc716cedocHeodo
2020-10-17 02:59:138b3323767793829332133050855ac69ea1a0cd1b5a51441f1baf16d09f47e663docHeodo
2020-10-17 02:34:324885a6fe3e6e3cf17f4b9c157b848115b2b51fc4b8e3e478650c6d8401062476docHeodo
2020-10-17 01:47:24a2694945dbd5fc7e3bc4801eea70491938e4e9426b60bd80625312d3f3a7962edocHeodo
2020-10-17 01:40:16115b344de8011d635adae59417a4dab2f992101ce81619ffe1b1b0423d9df79adocHeodo
2020-10-17 00:59:174d8d65bde63051b5066a4f7aa37942fbd309a54311e5b0903febd4d1277be363docHeodo
2020-10-17 00:41:42c64264c7336d7e9f516999fa287be55be63b634b63f5ebbf1bab24e38ada5e8edocHeodo
2020-10-17 00:19:40b5ea62943f3b8f07f8fc66e4e35a1d4d12022eae32ee901b016f48bf66fec06fdocHeodo
2020-10-16 23:59:13a9d9b8357ff803bd36d7bd0c12c770487fe774ccd22e81318606bad0f6ddaf90docHeodo
2020-10-16 23:36:53113ad60c6cf207f078325f4bd37200b9fdb820ddc2bfeac79a49a347aae1308adocHeodo
2020-10-16 22:53:5038a7276166183fb51e2c60c91165d139295de90105097cb4e24b077d3fa5d56fdocHeodo
2020-10-16 22:30:05c5480c5bcd7c9b06e744ebfca49ef98e45da1200c5e3762d6b47d9825189f3eadocHeodo
2020-10-16 22:15:135c58c91ffdffd84690c6746f6afc2eaeacd03df2e4a83c6e662755624113cf5bdocHeodo