URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: coghlanhealthcare.ie
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2018-03-23 15:20:35 UTC
Total malware sites :1
A record(s) observed :4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-04 12:54:50 78.153.209.44wpcpanel015.blacknighthosting.comNot listedAS39122 BLACKNIGHT-AS- IEyes
2019-07-29 11:16:36 78.153.210.4pemlinng058.blacknight.comNot listedAS39122 BLACKNIGHT-AS- IEno
2019-01-21 15:50:47 217.115.115.247cpanel1.webworld.ieNot listedAS30900 WEBWORLD-AS- IEno
2018-03-23 15:20:37 83.138.8.83helm3.webhost.ieNot listedAS30900 WEBWORLD-AS- IEno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2018-03-23 15:20:38http://coghlanhealthcare.ie/WIRE-FORM/IW-04408462/Offlinedoc emotet ext heodo ext abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2018-04-11 14:15:37f9c8b231fa050a7acc7b6da5171554068dfedd235ad9bd320c2cb0a9eff3b251docHeodo
2018-04-10 18:37:27f9c8b231fa050a7acc7b6da5171554068dfedd235ad9bd320c2cb0a9eff3b251docHeodo
2018-04-04 15:11:24f9c8b231fa050a7acc7b6da5171554068dfedd235ad9bd320c2cb0a9eff3b251docHeodo
2018-03-24 05:44:22f9c8b231fa050a7acc7b6da5171554068dfedd235ad9bd320c2cb0a9eff3b251docHeodo