URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	ceemeelol.ddns.net
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-06-01 17:34:02 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-06-01 17:34:06	13.212.176.2	ec2-13-212-176-2.ap-southeast-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	SG	no
2021-09-04 14:44:30	91.46.146.116	p5b2e9274.dip0.t-ipconnect.de	Not listed	AS3320 DTAG	DE	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-06-02 18:28:06	http://ceemeelol.ddns.net/bless/cc200-00909.exe	Offline	exe Formbook	zbetcheckin
2021-06-02 18:28:05	http://ceemeelol.ddns.net/bless/930.exe	Offline	exe Formbook	zbetcheckin
2021-06-02 18:20:06	http://ceemeelol.ddns.net/bless/cc200-009.exe	Offline	exe Formbook	zbetcheckin
2021-06-01 17:34:11	http://ceemeelol.ddns.net/bless/cc200-07.exe	Offline	exe RedLineStealer	zbetcheckin
2021-06-01 17:34:09	http://ceemeelol.ddns.net/bless/cc200-077.exe	Offline	exe Formbook	zbetcheckin
2021-06-01 17:34:06	http://ceemeelol.ddns.net/bless/cc200-09.exe	Offline	exe Formbook	zbetcheckin
2021-06-01 17:34:06	http://ceemeelol.ddns.net/bless/cc200-998.exe	Offline	exe Formbook	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-06-02 18:28:06	5a77d7c7c407337a3900bc0b58f0e27a6ba71a35a5ae92a85861e6b020ea8496	exe	Formbook
2021-06-02 18:28:05	214f61376f7830680175f08fdd0bd6d28fa6c7c44b7f1990e6cbbb4646fdf528	exe	Formbook
2021-06-02 18:20:06	780555ffbda34b2fe63790a38a7c3e4df0b437d17c22fe7c886fcd2ee72684d0	exe	Formbook
2021-06-01 17:34:11	21b1b4679bf30854c79beeb5d996a69e9566c296b9080e4a231fa2a6d161e81c	exe	RedLineStealer
2021-06-01 17:34:09	ac21c19e58c41f268014ca25f2fab76c398eaf6b58e0e66b74b0b0a30395dbc4	exe	Formbook
2021-06-01 17:34:06	97eac548a519771c90d729ee721eaa2519782e6aa0dbedc9cef35e938f68858e	exe	Formbook
2021-06-01 17:34:06	0490222a7f96d4d1a414521e4c01a46e3b5cb894061c2f5a3c704b25e01efc58	exe	Formbook