URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | denaros.pl |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2018-05-24 08:07:19 UTC |
| Total malware sites : | 7 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 7 (100%) |
| A record(s) observed : | 3 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 09:59:01 | 212.85.96.113 | clickweb.home.pl | Not listed | AS12824 HOMEPL-AS |  PL | yes |
| 2018-07-12 06:09:06 | 89.161.255.11 | domains008.home.pl | Not listed | AS12824 HOMEPL-AS | PL | no |
| 2018-05-24 08:07:34 | 79.96.9.66 | cloudserver053152.home.pl | Not listed | AS12824 HOMEPL-AS | PL | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2018-06-22 03:44:05 | http://denaros.pl/Lorem/GzakV6s/ | Offline | heodo  |  JayTHL |
| 2018-06-19 20:42:06 | http://denaros.pl/Data/ZA4l/ | Offline | heodo | JayTHL |
| 2018-06-18 06:23:06 | http://denaros.pl/Lorem/L49MGv/ | Offline | emotet exe heodo |  abuse_ch |
| 2018-06-14 05:55:15 | http://denaros.pl/Common/ups.com/WebTracking/HB... | Offline | doc emotet heodo | DecayPotato |
| 2018-06-12 14:30:05 | http://denaros.pl/Lorem/IRS-Transcripts-02G/50/ | Offline | doc emotet epoch1 Formbook heodo |  Cryptolaemus1 |
| 2018-05-30 14:55:21 | http://denaros.pl/Lorem/ups.com/WebTracking/NFR... | Offline | heodo |  JAMESWT_MHT |
| 2018-05-24 08:07:34 | http://denaros.pl/Common/STATUS/Invoice-8513052... | Offline | doc emotet heodo | amuehlem |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-11-30 10:07:29 | 1587594a2933c826f63d14ddd7dcb6447bf38175c4185708fc1adc0728a387b4 | html | ||
| 2019-11-30 10:06:57 | b091f84ced6ae2aa7a25b07dd228c71a9ebf342e9a85d985890ab4728e22669e | html | ||
| 2019-11-30 10:06:40 | 24d1b2ad895ff1fbe843ce94b1de2ef713229ef69ea62ad8022a0e2269bd2a94 | html | ||
| 2019-11-30 10:06:12 | 48b17aff38ca88c99f24f038e58f793cc03f4ccc786df2343913c9e911a02f04 | html | ||
| 2019-11-30 10:05:56 | a9103b05304026cec8d8d9c742488051d1c770184720f5a506584d1ac3d90dfa | html | ||
| 2019-11-30 10:03:57 | 6e73f6347c840301062c09a959d7b31da31b567f517ab9a4027c4bbdf06e476b | html | ||
| 2019-11-30 10:03:00 | 157369851cbf4e96827647cb0788e94734f8f52879c7161dc599ef4804b347f7 | html | ||
| 2018-06-14 05:55:15 | a8ede5b4e9ad5f52a3c28142fa26a4c2caa2d9bd9e73aead41942d31986e4abe | doc | Heodo |