URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: crm.maxenius.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-01-21 11:38:04 UTC
Total malware sites :1
A record(s) observed :1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-01-21 11:38:06 68.66.248.37nl1-ls11.a2hosting.comNot listedAS55293 A2HOSTING- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-01-21 11:38:06http://crm.maxenius.com/wp-admin/Scan/Offlinedoc emotet ext epoch2 heodo ext spamhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-01-23 07:27:00639ebecc28d4bf2303763cc01f9652bac3afafbe7044f58e3613a30787047422docHeodo
2020-01-23 01:03:30791d0b725c0bc4913e2782b24be96112f97873b650de242f2eb8ff67aedf5287doc Heodo
2020-01-22 20:19:4831e49b1899bba2d501d48db72766686f1c0d77627dd79e5585b8f5dcf1de7054doc Heodo
2020-01-22 18:57:38760da2cf865d8c30de733432733cd907c4d3473c8c956b337785f76899801383doc  
2020-01-22 16:32:36d21494a6c160eb3f2a364f7ac7f68e3e74bc89812e9c4e0f6f4cd0f177f7dff6doc Heodo