🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: escrowbank.co
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2021-06-15 16:29:02 UTC
Total malware sites :8
Online malware sites :8 (100%)
Offline Malware sites :0 (0%)
Newest active malware site :2021-06-16 16:23:40 UTC
Oldest active malware site :2021-06-15 16:29:04 UTC (Age: 5 years, 5 months, 5 days, 12 hours, 41 minutes)
A record(s) observed :7

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-09-23 01:37:29 13.248.213.45a67c48129651a0940.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2026-09-23 01:37:29 76.223.67.189a67c48129651a0940.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2025-04-27 15:28:16 15.197.142.173a4ec4c6ea1c92e2e6.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2025-04-27 15:28:16 3.33.152.147a4ec4c6ea1c92e2e6.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2021-08-05 13:02:56 50.62.160.73p3nwvpweb043.shr.prod.phx3.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2021-06-25 19:13:47 184.168.131.241241.131.168.184.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2021-06-15 16:29:04 209.133.217.247mail.netfounder.netNot listedAS29802 HVC-AS- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-06-16 16:23:40https://escrowbank.co/dole.phpOnlinedoc hancitor ext html Cryptolaemus1
2021-06-16 16:23:38https://escrowbank.co/spathe.phpOnlinedoc hancitor ext html Cryptolaemus1
2021-06-16 16:23:33https://escrowbank.co/foppery.phpOnlinedoc hancitor ext html Cryptolaemus1
2021-06-15 16:29:44https://escrowbank.co/wallet/plugins/raphael/de...Onlinedoc hancitor ext html Cryptolaemus1
2021-06-15 16:29:39https://escrowbank.co/nuthatch.phpOnlinedoc hancitor ext html Cryptolaemus1
2021-06-15 16:29:38https://escrowbank.co/lavaliere.phpOnlinedoc hancitor ext html Cryptolaemus1
2021-06-15 16:29:24https://escrowbank.co/wallet/plugins/raphael/de...Onlinedoc hancitor ext html Cryptolaemus1
2021-06-15 16:29:04https://escrowbank.co/broadcast.phpOnlinedoc hancitor ext html Cryptolaemus1