URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	balletmagazine.ro
Domain registrar:	n/a
Domain registration date:	2019-07-24 00:00:00 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-07-13 18:56:04 UTC
Total malware sites :	1
A record(s) observed :	7

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-10-30 07:59:59	185.53.178.99		Not listed	AS61969 TEAMINTERNET-AS	DE	yes
2025-10-24 07:48:16	185.53.177.54		Not listed	AS61969 TEAMINTERNET-AS	DE	no
2023-01-26 09:17:44	188.215.244.191	191-244-static.mxserver.ro	Not listed	AS44043 Cyber_Folks-RO-DC_CLJ	RO	no
2022-07-13 18:56:05	188.215.250.187	server.balletmagazine.ro	Not listed	AS44043 Cyber_Folks-RO-DC_CLJ	RO	no
2022-10-08 16:39:41	188.212.156.205	cloud202.mxserver.ro	Not listed	AS44043 Cyber_Folks-RO-DC_CLJ	RO	no
2022-07-18 18:50:30	104.21.96.107		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-07-18 18:50:29	172.67.176.225		Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-07-13 18:56:05	http://balletmagazine.ro/wp-content/9VrMPV/	Offline	dll emotet epoch5 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2022-07-13 20:08:58	73490d0f86a34f6d1436aa0aa762cec0abae0bead19263fdd4def2e0483f9da7	dll	Heodo
2022-07-13 19:46:32	0d58662e3ee3901e84c15ad17b5b60a4d3e287e3fa1ec5a9b68c21a7143faeff	dll	Heodo
2022-07-13 19:37:55	68f7e9e4a3ba7e7043365452c3a0ab98d844c5d336d32fd3cfc322a56dbb6a89	dll	Heodo
2022-07-13 19:12:25	bd4684db2bc389629ed44f30d7a151215217686cad55326d538e2144bb10ecdb	dll	Heodo
2022-07-13 18:56:04	9307ad823e3b90612a20329b031eef134712f37f446ed562e8e5b372ba68ad22	dll	Heodo