URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: augsburg-auto.com
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2019-02-20 16:00:06 UTC
Total malware sites :1
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-28 01:10:55 45.130.41.38ssl.sauron.beget.comNot listedAS198610 BEGET-AS- RUyes
2019-02-20 16:00:07 87.236.16.227ssl.kabigon.beget.comNot listedAS198610 BEGET-AS- RUno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2019-02-20 16:00:07http://augsburg-auto.com/BV5eh1IerP/Onlineemotet ext epoch2 exe heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-08-15 20:02:3229457444b7268825b17399a00ce19fcd9ecd6647b936f229c8ca2bb35ea4ca64html  
2019-02-20 16:19:0525f60e5eccdab5e8b6621515207c31431c31d222d9c97d37b4970202b39e6c2cexe Heodo
2019-02-20 16:00:06460eabedf895f7a2e13b6ee4fed9ecc59d6687772ed087a65cb6ffc83a8cf932exe Heodo