URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	earthtech.io
Domain registrar:	Namecheap
Domain registration date:	2019-03-26 07:04:21 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-01-13 10:56:03 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-03-31 20:29:58	104.21.84.145		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2022-03-31 20:29:57	172.67.194.41		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2022-05-15 10:32:12	199.16.172.12		Not listed	AS2635 AUTOMATTIC	US	no
2022-05-15 10:32:12	199.16.173.105		Not listed	AS2635 AUTOMATTIC	US	no
2022-01-13 10:56:04	199.16.172.60		Not listed	AS2635 AUTOMATTIC	US	no
2022-03-26 19:13:03	99.83.154.118	a51062ecadbb5a26e.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-18 07:56:19	https://earthtech.io/wp-content/wzg8xiDTJy6T7Xo/	Offline	emotet epoch4 redir-doc xls	Cryptolaemus1
2022-01-17 20:17:06	https://earthtech.io/wp-content/TVGX_7101/?i=1	Offline	emotet epoch5 heodo xls	Cryptolaemus1
2022-01-17 19:52:15	https://earthtech.io/wp-content/TVGX_7101/	Offline	emotet epoch5 redir-doc xls	waga_tw
2022-01-14 11:18:04	https://earthtech.io/synechology/EE-3217084/?i=1	Offline	emotet epoch5 heodo xls	Cryptolaemus1
2022-01-14 11:01:04	https://earthtech.io/synechology/EE-3217084/	Offline	emotet epoch5 redir-doc xls	waga_tw
2022-01-13 10:56:04	https://earthtech.io/synechology/p31/	Offline	emotet epoch5 redir-doc xls	waga_tw
2022-01-13 10:56:04	https://earthtech.io/synechology/p31/?i=1	Offline	doc emotet epoch5 heodo	sugimu_sec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-01-18 07:56:19	b9d8c54911a0b797656fcbfcab2743be2e6e5c14b82a2c04e97f024b99fffbbd	html
2022-01-18 06:26:13	e95a1d9f8651d516e59ddffadc5fd94a499b888077d6cc60ee5cc1b95c1f91e7	xlsm		Heodo
2022-01-18 05:58:27	c837ba3be459d30d75ba53677884651f8ea4be085bfc4fd3bd3d87a85c4f2136	xlsm		Heodo
2022-01-18 05:40:26	8a1f1920da77f2aa02e0d38a92cc3f9901781484353db80e8940a750d673f023	xlsm		Heodo
2022-01-18 05:25:45	c376ffe4c231464c947bc77a323936d8eb64d85bcd1ddcd33bcc161dae53ef15	xlsm		Heodo
2022-01-18 05:05:58	64d41354ecd7f297389d824c38b8b00241322769011feb0c864269145fd8f174	xlsm		Heodo
2022-01-18 04:44:09	1d95f9d613b01b2dcf2ff10254cf77e3210a07f1a209855de18043c161520191	xlsm		Heodo
2022-01-18 04:33:50	2fa3f98b356abd03728f0483564efe772cf7b96ad1b42fe1cbfb4a0298ac7b53	xlsm		Heodo
2022-01-18 04:17:27	ccbc039cf33ad86b9287d5ddeb42977c7b30bdf9e8a728478f7be2f0231c9310	xlsm		Heodo
2022-01-18 03:54:17	42671e33a5cd09da48d20b7a12e9d8c6b5c3e8e397deffd7d721f10e3c26c410	xlsm		Heodo
2022-01-18 03:36:19	0228ceafa8f9fb29813b9462d9aee85f346c43440aabab248ee3a28283eb4f6f	xlsm		Heodo
2022-01-18 03:14:26	58a1033b4773f07ae0f7257590bf372fde51e9bc60298c483a5bf53a93210433	xlsm		Heodo
2022-01-18 02:55:08	976872f868b49d98d5e487b42d9bce61f8b05d610fb794ccacbe1ca4274d71cd	xlsm		Heodo
2022-01-18 02:48:27	071b56a5371a11d25784a06fa995cbf3127cafc79a1da89ed889d7d35b235f46	xlsm		Heodo
2022-01-18 02:28:49	05e2970a2d23748d20962e6a506d75a8649a4f5c2b7a0dc7723c90680659f0c9	xlsm		Heodo
2022-01-18 02:20:51	954cce122bbc5f2db9b047be265ecb1c8dbbe04b37eaf5b2f738423610df2d4a	xlsm		Heodo
2022-01-18 01:56:32	72c3f7215a023270169a1f1a078c7df9714bdb4ab297fe3bfde6e13fbcb08c68	xlsm		Heodo
2022-01-18 01:46:41	bca263286c21f2647b4f0885a0848164685ab40aa0d758e94eb8d774d940c69d	xlsm		Heodo
2022-01-18 01:21:35	7a36780755f25695430762b1ae5759a6b789c298db856370cd0b6fd0f857f835	xlsm		Heodo
2022-01-18 01:03:08	e961e46fe0000505f4534e036a9d1d2a59823cf644438a2733ab659e9c22988b	xlsm		Heodo
2022-01-18 00:47:37	5b40663cd5694685107f64ce59209f23d87706238f5b564227a288fdf40749f6	xlsm		Heodo
2022-01-18 00:27:09	875b1c9e36a5cf567317565b0b54324da0aac7ca5c69f0c688853731da4082fe	xlsm		Heodo
2022-01-18 00:19:40	2fed78e7159614ab93c099805eda683afcb3a8a0efcb75d260f19202886700e3	xlsm		Heodo
2022-01-17 23:55:37	053bb9b9096198d542ba99d4aa0148e9af3797c17d2b874f406bf9d35749d809	xlsm		Heodo
2022-01-17 23:29:16	3205e9241e6f23942fd5b8ff4babdf561cd0022a6d42a800075046bb9e627eb8	xlsm		Heodo
2022-01-17 23:22:50	b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83	xlsm		Heodo
2022-01-17 23:00:37	47c80c975818ab9bd09449d2130bcfb94eeab3b0aaaa784f5c2b56cc3d32c796	xlsm		Heodo
2022-01-17 22:46:54	f4bb1e4f32c5444db3de6d023a3e27ecd0b948e8b13b1d54d7c725ff63dbd7da	xlsm		Heodo
2022-01-17 22:27:33	1227b6464953ca3a4307804a94c248736f40446a42121d3e0ceb52fc63629f8a	xlsm		Heodo
2022-01-17 22:08:12	ffb2a0ff4ab817787bae6e304ecc561e2e839edd4d20194227a194e6e8bb7b0f	xlsm		Heodo
2022-01-17 21:50:46	2350f0180119d36193a0ff0d35370865e389ebf2b910fbfa8419c7a2258a9356	xlsm		Heodo
2022-01-17 21:27:27	9994c128dac8fef0f5b7a94e7379a6eb0f2b3ab28cf8c641f2fecfc11a1100a9	xlsm		Heodo
2022-01-17 21:08:13	5951f2e9692548b9221f83d17d2495b963300952539c88355ebb9a7357076104	xlsm		Heodo
2022-01-17 20:47:21	9555c1c093bfa3059281f4a196afecf27cfaa2d5a75589213f0459605adf319e	xlsm		Heodo
2022-01-17 20:39:12	e6606ca94847ec10df1e4a012f532da41ec49a2658c1f4193e06f7b9baf6a010	xlsm		Heodo
2022-01-17 20:23:59	2700e306bf7f876ab9aa04c5692bdb5a144a94c879ff4061357f70ac4776d0d3	xlsm		Heodo
2022-01-17 20:17:05	daf9d2d5460f0edf20f2285e5fe0e504fcdd4314db7a5abb9e3e8a00f5781f6f	xlsm		Heodo
2022-01-17 19:52:15	b0153135249ed5907fcba707ae066bc994449cb2be7d8dd72e994eb9cc006bda	html
2022-01-14 22:54:02	d2569a5701a8fc23468530b950ed661832ef6d909e2a1a921da07a879135f612	xlsm		Heodo
2022-01-14 22:39:19	cf04f9d9d12315b27f3fc16c12ca6860a84b391e604598b91b704eaabcca52d7	xlsm		Heodo
2022-01-14 22:25:46	d9d89cefabc087af2be25fadd162ff8d73bc3cc83ed65bfa30cc860af14db3c8	xlsm		Heodo
2022-01-14 22:14:56	8e9e28c923feb00ff3fe04657945eb916f591f695f3ca3f43ab65944f9525e14	xlsm		Heodo
2022-01-14 21:37:06	a51724da5a2c220ccb551df3d43ba4004b8231ff7848bc4058daf8477c56f75e	xlsm		Heodo
2022-01-14 21:27:33	2819520aee64e6800af25eca5fa2aa0bc926fc6dd13200b425c0a686d95db027	xlsm		Heodo
2022-01-14 21:14:21	013f28c036fa5af595b6c61d98cb6dc88cb8045194ef50facb59d481041c23cd	xlsm		Heodo
2022-01-14 20:45:28	efd30552aad21aeac0f4a05a866a996d283149a65d8af4139c50960523c46bbf	xlsm		Heodo
2022-01-14 20:22:59	1945d61931cc7e9819244230ab70575eb1cebf7348d804e518182aecd018c76a	xlsm		Heodo
2022-01-14 20:06:11	6c0e05648d4f157e4d9aaeaba27c463a21b4039a0a3ed03209a6c711b556e35c	xlsm
2022-01-14 19:42:17	87a33eb014251fbd3e80d9dce2bf789e0c1b579d59554f4efbdd3f6d78a6e57f	xlsm		Heodo
2022-01-14 19:29:23	21961b0d16c7d2561ef0c3d8a055eee86e90688f4a6fbe27c7f64c61096d0aec	xlsm		Heodo
2022-01-14 19:14:29	c822efa6c4fed299c0bd7794b8f9a4e193703f2d22f78a795dbebc4748dbd4b1	xlsm
2022-01-14 19:07:45	ef09ff5f022c6e6a1dbc2d46edece778a389d5074c01aa184fbcaf30fe35fa42	xlsm		Heodo
2022-01-14 18:43:43	4fca1c54e08fdaa16e2a0697f33e798e9dcacde746cc035fe595bdbf1822b2f1	xlsm		Heodo
2022-01-14 18:30:43	5d096704a430b052afbdbc31e3ab50be22354e158b327750c24aad5193cbc305	xlsm
2022-01-14 18:14:19	ed0448141caba757e10c045d97e8593777ba7c60b8871b5871622b2b80ad1519	xlsm		Heodo
2022-01-14 18:02:17	0d689f583f780d0dbd3e9197bac7b961ad20c2a5d4e0df322ec0308f43eac999	xlsm		Heodo
2022-01-14 17:43:21	8af80399bba56ded76bb3e7373388d1354841bbea61dfab0094215403def66c0	xlsm		Heodo
2022-01-14 17:27:07	76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93	xlsm
2022-01-14 17:15:54	518ada94017758d7fc52e229e1470a4b5285da78a90d748232462647e910104c	xlsm
2022-01-14 16:47:04	6e3f7fbf88f0c06a06f7c3fa532eb76dc49819a18988ab866c98c246717e1e5e	xlsm
2022-01-14 16:39:37	ab5d8bf5fc5242d31fac07794a032f75a097559e76c27991d42d0afa48519db5	xlsm		Heodo
2022-01-14 16:16:42	689555499fd2dff9a85acca987cf63ecb004150fb9428e7336b11a90eed8a4a6	xlsm
2022-01-14 15:56:48	8af12a9f834703c63edad17992c5c74f775cae7734f8a363b88ab13d0599c6ff	xlsm		Heodo
2022-01-14 15:53:37	dac736a5562b2a96cece573228b50c17f369d3912fef2b92dc5ea40d5c427034	xlsm		Heodo
2022-01-14 15:39:06	3e23d05ec9aa086013200c2df62ea349686f0b76b06f16992f3af4cdb0735bb4	xlsm		Heodo
2022-01-14 15:14:56	25ffc4f1a9abeb750423f929d563d90c09121eee81a928f86f02f8e4421f5c7b	xlsm		Heodo
2022-01-14 14:52:49	9770e911e79143121d645e9e5c84b8472e49263dd3ebe7f615b4051784d2ade9	xlsm		Heodo
2022-01-14 14:34:01	a972c47050ae7cf97f0c52155e8ab1462d5a9606eaf7140f1ee56f1e8a45dbb8	xlsm		Heodo
2022-01-14 14:12:35	de59e179f2f1f561d14fc8fe0d9e607430201108b22880bef5fb5284a2b0a41e	xlsm		Heodo
2022-01-14 14:03:48	1f33cccbde25d58a817b0b6355084b8d0694bb104019808808694c2e6bbe2fbb	xlsm		Heodo
2022-01-14 13:31:44	8241a915f1a80d0c6898233cdfef1c73d4e00a2b17c41b4bf84984d9b4234f46	xlsm		Heodo
2022-01-14 13:15:15	e1f0eb778a09fec529aa7aff9d665828b18007c8e52d62565a552f606c04442f	xlsm		Heodo
2022-01-14 12:52:28	e666db29cafcd8ca53bf39e302e59b22b962a623ce08bea482188b4b198b059e	xlsm
2022-01-14 12:42:24	1c8efbc70bde55f70789960968bfdb1a261eab6bc372e1f6859aee00261a7f82	xlsm
2022-01-14 12:09:33	7ae8d061dd1dd74a37ac33eced5d361e376cc4b919bdfd82338595f8e17d1e46	xlsm		Heodo
2022-01-14 12:03:05	b57a55f2405494bd567fe9fd7d0b20a4dff80c22cc57b45a3646dc9e19ac69f7	xlsm		Heodo
2022-01-14 11:35:41	77c84a4f67f70d068261158ddf09d5e98292a7d86397fb95dec8f0092a67d25f	xlsm		Heodo
2022-01-14 11:18:04	679a703b419763bfb1ec0a81bcfbb679e4db76684a957e2942c64f8446d0a1ad	xlsm		Heodo
2022-01-14 11:01:04	5c8294d4f61bb43f0618fb6f8c8b77a60dd567b0c56202cf2a5dd873fe7c92a9	html
2022-01-14 10:51:30	ee32ff0e25e569a3e5146055fac6c20e2d9216d44702df62552302b1e28a42d6	xlsm		Heodo
2022-01-14 10:24:44	240d9c912338f39fde436264a56a9b48ded82608f23ae5f4a8f732110c2b30a2	xlsm		Heodo
2022-01-14 10:18:51	ccaa6507919076a28b38c5b5e30d2091705e482d54aedc76bec5163d31e21fe1	xlsm		Heodo
2022-01-14 09:44:43	0b9b2acaa62d7f34f96054e94f340c1f4957f6f0ecd13f1635b8cf9cbfe46098	xlsm		Heodo
2022-01-14 09:25:35	920dccc135e7f573d85fc925df056af68170bbdead1b6cd0e1fcd31b1e1b2e7e	xlsm
2022-01-14 08:55:25	320e9b7c12da6a0484b786666c2e5bd35a707234d1503379ac882d9a9c7ecd69	xlsm		Heodo
2022-01-14 08:25:57	c6d25e85c9b94f389f35a0dcf68e58dd96c1b1dd4269ef4b5b8aac454b2efcba	xlsm
2022-01-14 08:03:24	3c1065f5a3bd623799cdc9f2d15405189dd2604a1ddc45c113c19eec70f81c77	xlsm
2022-01-14 07:36:01	e7dff9977a528e887ecaa6aa818a1ddf868d700f6e13078ac53d801c61d4771a	xlsm		Heodo
2022-01-14 07:23:29	c94b6907928429e7d56f171d9a379d24c0250086ffbeb2a9da5dde1049fa569f	xlsm		Heodo
2022-01-14 06:41:15	d08e195ad3750d53f5dab90cbc01f05dc26d11db16c7eb3dc74a1656b7417cf7	xlsm		Heodo
2022-01-14 06:05:26	8f7a9cc8cbc19032e25ab6524b05b1e6807b05e96abe4e3467200394ef44f5a8	xlsm		Heodo
2022-01-14 05:53:59	046d5f85d492903e52b9161d9454a1b6a18f3980482650fff9a9b2ba7086c1c0	xlsm		Heodo
2022-01-14 05:33:19	dc91c7176e2bff04a36a36648c214aded82bdc8c5a148d7eed728ce18b4c470d	xlsm		Heodo
2022-01-14 05:19:41	de7e4158f8c853cec334533366fbfa1568ec9384f0e5d07d1bc57298aab905b4	xlsm
2022-01-14 04:48:54	5e5e12a3a114f3edcabd2e37239ea81f03db5f04ae7c6a5b5436f8898489f84f	xlsm		Heodo
2022-01-14 04:38:37	4098eed9c3a2b676312fcf3dcdbcf4f18affb50ab9b31d02868aeee1b6e7d932	xlsm		Heodo
2022-01-14 04:23:03	38aa8bb59cfaed48d361e496e1682f677a3f58223fbe1a6a9e2e1fcd5d837c43	xlsm		Heodo
2022-01-14 03:51:54	02f6b95427d622406b0be50a7e95ce727e32a663c6172f550e5870f3c53f1ad4	xlsm
2022-01-14 03:40:21	68a933359b3763ca27f3ad54dc136f2836e4060f851f1ef534ab5a9c57894508	xlsm		Heodo
2022-01-14 03:24:18	6ac14b86db1b807b8bdc126d8e1ba66536ff55b5fcddb9ba068bd70b176c52be	xlsm		Heodo