URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: ddcpl.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-09-09 05:44:08 UTC
Total malware sites :3
Online malware sites :0 (0%)
Offline Malware sites :3 (100%)
A record(s) observed :4

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 19:26:15 103.191.208.92crystal.herosite.proNot listedAS150055 DIGISNAP-AS-IN- INyes
2020-10-09 19:26:05 216.10.252.252Not listedAS394695 PUBLIC-DOMAIN-REGISTRY- INno
2020-10-29 09:18:06 103.240.104.231web03.in.ddcpl.comNot listedAS132986 DDCPL-AS- INno
2020-09-09 05:44:11 103.240.107.211103-240-107-211.rev.ddcpl.comNot listedAS132986 DDCPL-AS- INno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-10-28 13:34:06http://ddcpl.com/wp-content/cHukHHH9UrbY8ARR/Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1
2020-10-28 10:28:07https://ddcpl.com/wp-content/cHukHHH9UrbY8ARR/Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1
2020-09-09 05:44:11https://ddcpl.com/wp-includes/images/P62255.jarOfflinejar Qealler rat Abjuri5t