URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | dmlinks.bid |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Not blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2020-10-21 00:57:03 UTC |
| Total malware sites : | 3 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 3 (100%) |
| A record(s) observed : | 65 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-05-17 09:44:10 | 37.48.65.155 | Not listed | AS60781 LEASEWEB-NL-AMS-01 |  NL | yes | |
| 2025-11-17 14:26:15 | 212.32.255.111 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no | |
| 2025-11-03 21:22:59 | 37.48.77.81 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no | |
| 2025-10-22 04:38:51 | 81.171.22.4 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no | |
| 2025-05-28 07:25:56 | 37.48.65.145 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no | |
| 2025-10-31 05:30:09 | 37.48.77.82 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no | |
| 2025-11-01 06:03:09 | 37.48.77.79 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no | |
| 2025-11-12 18:42:09 | 212.7.209.215 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no | |
| 2025-06-01 10:15:31 | 37.48.65.152 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no | |
| 2025-04-28 13:03:39 | 37.48.65.143 | Not listed | AS60781 LEASEWEB-NL-AMS-01 | NL | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-10-30 15:58:05 | https://dmlinks.bid/wp-content/9VwGroWouuuMmLZn... | Offline | doc emotet  epoch2 heodo |  Cryptolaemus1 |
| 2020-10-27 18:48:10 | https://dmlinks.bid/wp-content/n4/ | Offline | emotet epoch3 exe heodo | Cryptolaemus1 |
| 2020-10-21 00:57:04 | https://dmlinks.bid/wp-content/invoice/3uqr3u5j... | Offline | doc emotet epoch2 heodo | Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-10-30 17:07:54 | 33478c951541dfc62cd1b974afa9e6be46b51b140a5228aa4f34f417a17b8a64 | doc | Heodo | |
| 2020-10-30 16:47:16 | 0b8a8e7a53d7fe5cfe16dbec4b9d21361ce7f6eb2f21c9ece0c5fdea89d09b74 | doc | Heodo | |
| 2020-10-30 15:58:05 | 2a25d8a1cbc4a93a1a7f07a290d36e24c0e2750b65badf5e91709eb644fad12f | doc | Heodo | |
| 2020-10-27 18:48:10 | 47c08f63b4d47ddbd7f8601dbd1098682522c5d6e4f6804dd83b47bdb5c8d8f4 | exe | Heodo | |
| 2020-10-21 02:40:30 | d6053ab1f8a8801a71b22ecf5257f4cdfee7138eb99345ad33ff208e175aac0f | doc | Heodo | |
| 2020-10-21 02:13:40 | 614bbd10017422522d46a734ed08de066834e449d5802b036b0231a39b0c043c | doc | Heodo | |
| 2020-10-21 01:57:07 | afcfe7ff49c2df7f47347c4c49d64ac3f027b1c79f5d090a0daf526fd65d859d | doc | Heodo | |
| 2020-10-21 01:26:38 | 6eb67022c07e3f32436afc6e89eddb132a4c5d34d733c824ab3dabf51b7c712a | doc | Heodo | |
| 2020-10-21 00:57:04 | 7b59e4314d2b1bbefd045815d54be5bd19315bcd13e3de6816a36bfd0930e032 | doc | Heodo |