URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: dijitalklinik.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-10-20 20:48:02 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-01-13 02:09:46 104.21.6.192Not listedAS13335 CLOUDFLARENETn/ayes
2020-10-20 20:48:04 172.67.135.50Not listedAS13335 CLOUDFLARENETn/ayes
2020-10-20 20:48:03 104.28.6.115Not listedAS13335 CLOUDFLARENET- NZno
2020-10-20 20:48:03 104.28.7.115Not listedAS13335 CLOUDFLARENET- NZno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-10-27 09:15:05https://dijitalklinik.com/wp-admin/LYq/Offlineemotet ext epoch1 exe heodo ext neutrify
2020-10-20 20:48:04https://dijitalklinik.com/wp-admin/balance/hrle...Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-10-27 09:15:053ed724b0a3cca26f83a484ddc93a2dc4c94402d62aa9aff3dddffbb784ed308fexe Heodo
2020-10-20 20:48:038cadf5fc31643a1acc9b991d110e039e7e0520e94783c61d9caf5ccb2481915edocHeodo