URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: asaivam.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2018-06-30 06:01:17 UTC
Total malware sites :4
Online malware sites :0 (0%)
Offline Malware sites :4 (100%)
A record(s) observed :15

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 20:46:39 162.255.119.230Not listedAS22612 NAMECHEAP-NET- USyes
2020-01-05 17:11:14 103.224.182.252lb-182-252.above.comSBL596527AS133618 TRELLIAN-AS-AP- USno
2019-09-28 06:15:01 154.95.167.144Not listedAS134175 SH2206-AP- HKno
2019-07-27 05:54:15 45.194.96.2Not listedAS138456 OCTL-AS-AP- MUno
2019-05-24 18:37:30 184.168.221.6969.221.168.184.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-05-23 17:26:58 184.168.221.7272.221.168.184.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-05-02 02:46:46 50.63.202.7474.202.63.50.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-05-24 00:28:50 50.63.202.6767.202.63.50.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-04-30 19:40:18 184.168.221.8888.221.168.184.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-05-01 07:43:07 50.63.202.8989.202.63.50.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2018-07-01 06:02:10http://asaivam.com/Order/ACCOUNT489445/Offlineheodo ext JayTHL
2018-07-01 06:02:09http://asaivam.com/Gwlmc3fWUZ/Offlineheodo ext JayTHL
2018-07-01 06:02:06http://asaivam.com/Abierto-Pasado-Vencimiento-P...Offlineemotet ext heodo ext JayTHL
2018-06-30 06:01:19http://asaivam.com/Abierto-Pasado-Vencimiento-P...Offlineemotet ext heodo ext p5yb34m

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2018-07-01 06:02:06027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6docHeodo
2018-06-30 08:37:22027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6docHeodo