URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	ec2-54-151-29-220.us-west-1.compute.amazonaws.com
Domain registrar:	MarkMonitor
Domain registration date:	2005-08-18 02:10:45 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-11-23 11:47:06 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-11-23 11:47:14	54.151.29.220	ec2-54-151-29-220.us-west-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-11-23 11:47:14	http://ec2-54-151-29-220.us-west-1.compute.amaz...	Offline	emotet epoch5 exe heodo	waga_tw

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-11-29 11:07:51	0c2554f58791077243fd602183379a9f036b02c04ced69abb851fb0aa277bac3	dll		Heodo
2021-11-23 12:54:56	a821425fb6b5b8ecf6014f1c24df0cba9b02fc73106a4cacc3fc4746b76bce8b	dll		Heodo
2021-11-23 12:49:24	4b70c7d152f48527b20f55113d017d427599d129f1f3485a2e2469767da706f0	dll		Heodo
2021-11-23 12:29:37	081b3077b204171d6796612ebab008d56d48ed93203740d4d49eceb82158f67e	dll		Heodo
2021-11-23 12:22:13	804226c48736c8ef11f84a68e678df4849998f7b73550ebdf0476da4de27762d	dll		Heodo
2021-11-23 12:12:50	659d71d50cee8d90798d0e72b00c212ac8a8f1edb326ef7ab22756e3cefb14a4	dll		Heodo
2021-11-23 12:01:23	dcf7bd6fccec991ef6ee20c0289e0a89c88fcec0f8706cb3df14027fb4bd94cf	dll		Heodo
2021-11-23 11:47:13	69053087db7bc2f074175d6571999f305cf810808d26d25cf4b05f65bd3f403b	dll		Heodo