URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-28 02:22:14 | 91.198.171.221 | srv1.fortsa.nl | Not listed | AS207829 Esmero | NL | yes |
| 2022-03-29 12:05:05 | 185.37.70.58 | server077.yourhosting.nl | Not listed | AS48635 CLDIN-NL | NL | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-03-29 12:05:05 | https://fortsa.nl/nsf-mailing/SDly9v/?i=1 | Offline | doc emotet | |
| 2022-03-29 12:05:05 | https://fortsa.nl/nsf-mailing/SDly9v/ | Offline | emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-03-29 16:46:09 | 3ae70ca231fc68caf9b069513aeeed261edae36013ed6fe2f2e5d3ced1e80adb | xls | SilentBuilder | |
| 2022-03-29 16:12:38 | 723395fe95e3d656d422955edae3e78b38c2665cac6e68947fcbd18817801e4d | xls | SilentBuilder | |
| 2022-03-29 15:33:02 | 65c22cb7a34b3440d28675d2b3b926b55004765609e52e3c099ab823e6f4ac69 | xls | SilentBuilder | |
| 2022-03-29 14:58:11 | 81113b572a380caf1d7469e353abb8ea79ec0dfa9c19a9e4add89e0e1cb8fd50 | xls | SilentBuilder | |
| 2022-03-29 14:17:22 | f826114223c99e0d29401b4f95bd67ff825dba627a87a19e2c69a76a93d6773e | xls | Heodo | |
| 2022-03-29 13:34:30 | af9bb5756300ab9d303c59eb0df174e3d1072f7c8d7e0104d84a11aa66a3dc7b | xls | SilentBuilder | |
| 2022-03-29 12:39:06 | f0b04952c2684b719598d0129456554b89af4cc8ec37578bf1e3a3be4540b404 | xls | SilentBuilder | |
| 2022-03-29 12:05:04 | bdaaebf955900e2242983fc61d9db8fccdec969587e15dbd3b002247db315fbe | xls | SilentBuilder | |
| 2022-03-29 12:05:04 | a0440b103d1fcc20d64efe6d10968c82434036ddea235da460a1bdd4403354b4 | html |
