URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	dungorm.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2018-05-23 22:07:02 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

No IP address found (domain offline?)

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2018-09-29 10:02:13	http://dungorm.com/wp-content/themes/ups.com/We...	Offline	doc emotet heodo	zbetcheckin
2018-06-13 18:46:06	http://dungorm.com/wp-content/plugins/ACCOUNT/H...	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2018-06-04 17:11:16	http://dungorm.com/wp-content/themes/Facturatio...	Offline	doc emotet heodo	Cryptolaemus1
2018-06-01 14:55:21	http://dungorm.com/wp-content/themes/Facture-im...	Offline	doc emotet heodo	Cryptolaemus1
2018-05-23 22:07:11	http://dungorm.com/wp-content/themes/ups.com/We...	Offline	doc emotet heodo	c_APT_ure

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2018-09-29 10:02:13	b4fdb77c5b6eede55fa1025dcbd522ada24dc6fef82efbeac60934cb6a8e8005	doc	Heodo
2018-06-15 14:58:36	10b4c1ae0adc1a115d3912e20347e928100ed65741b74d9430004405644c8864	doc	Heodo
2018-05-25 22:47:37	b4fdb77c5b6eede55fa1025dcbd522ada24dc6fef82efbeac60934cb6a8e8005	doc	Heodo