URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-08-17 12:58:19 | 46.8.8.220 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-17 12:58:19 | 46.8.8.222 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-17 12:58:19 | 46.8.8.223 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-17 12:58:19 | 46.8.8.224 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-17 12:58:19 | 46.8.8.225 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-17 12:58:19 | 46.8.8.226 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-17 12:58:19 | 46.8.8.227 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-17 12:58:19 | 46.8.8.228 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-17 12:58:18 | 46.8.8.229 | Not listed | AS60592 GRANSY | CZ | yes | |
| 2025-08-16 10:34:06 | 46.8.9.229 | Not listed | AS60592 GRANSY | CZ | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-01-31 03:47:13 | http://backup-new.5kmdeal.my/wp-content/plugins... | Offline | doc emotet | |
| 2020-01-30 21:52:13 | https://backup-new.5kmdeal.my/wp-content/plugin... | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-02-01 03:21:06 | 970df6100d8375af169bb259df2c7bb1ad641294e34ed57dc3ad02a38371b4c7 | doc | Heodo | |
| 2020-01-31 21:18:54 | d603225a9202932de7c6a297c4ce3c6bfc71795689418faadb0ec35ed9af55b7 | doc | Heodo | |
| 2020-01-31 08:57:27 | db29ff54d37ebd7694c5190fc3ddb0ceffd896c7ed43b3f4abb8ab28658ff955 | doc | ||
| 2020-01-31 00:44:24 | 1092c9cc1b0dbf643c81898c30d3034b4db59f49a86de85ced39a5315ce4549e | doc | ||
| 2020-01-30 23:30:24 | b93c176b25e95c8538cc6e80bf1dca7b57ab9a7fe306415caed9989f1c306dd3 | doc | Ransomware.GandCrab | |
| 2020-01-30 22:02:14 | 8aa2f0d5d11a3aedd257f45c6768e0c8af5a1473436c6e956d5455494349ab8c | doc | Heodo | |
| 2020-01-30 21:52:12 | 5f956252e9f433a4b7675b2422ef016eac5627672a114bfafbc0c667a22db5dd | doc | Heodo |
CZ