URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-05-03 20:43:06 | 104.21.49.253 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2025-05-03 20:43:06 | 172.67.198.22 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2020-10-06 08:47:55 | 185.214.124.146 | Not listed | AS47583 AS-HOSTINGER |  SG | no | |
| 2020-08-11 16:47:05 | 172.67.207.242 | Not listed | AS13335 CLOUDFLARENET | n/a | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-08-11 16:47:05 | https://foryoubest.com/wp-content/private_zone/... | Offline | doc emotet  epoch1 heodo |  spamhaus |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-08-11 18:15:21 | e589ae383d2dda4770ca6a4cd98ae21ad8e8230567a0c3c2dd5fe33395d90cef | doc | Heodo | |
| 2020-08-11 17:54:39 | 308dd9d0b4a83eed9cf0f4d5014a22bbb9f37b197d9f8304612cb48397cd5404 | doc | Heodo | |
| 2020-08-11 17:40:37 | 9081c21cb26135e8d85675222746dc6dd85b90f195e45ca7cc051103751fa512 | doc | Heodo | |
| 2020-08-11 17:22:49 | 43dfe63eff9212397ee2b7be571cd22d59ee8e88b32968034a655193a6ff6b71 | doc | Heodo | |
| 2020-08-11 16:47:05 | eceee3a8316d96e7e391178028416a764a5aa0eab8dcf94f1ec6af4f5ad3d977 | doc | Heodo |