URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-05-02 07:57:17	193.141.3.68	a04.rzone.de	Not listed	AS6724 STRATO	DE	yes
2020-09-02 08:44:34	81.169.145.95	w8f.rzone.de	Not listed	AS6724 STRATO	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-09-02 08:44:34	http://gnadl.net/cgi-bin/cD/	Offline	emotet epoch1 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-09-02 11:36:05	741d89ad8af5010620d6fe2dc2d6eb9c7e68f60c5faa0160352eaf33e6e9f406	exe		Heodo
2020-09-02 11:25:39	6fc59605b410f1f55d879aef4c28005975c90856b7df68b4ba97e46501375573	exe		Heodo
2020-09-02 11:08:39	3b1cfa99950e7f7567f6e63ead544c602a3c53050d683a4dd7da1bbd42d70d80	exe		Heodo
2020-09-02 11:03:51	d8e70e47a3f52ae73e6aae56063050451c02eb29a783a539b550e1299e8d579b	exe		Heodo
2020-09-02 10:40:26	dc8ce811952251e766ec19541febc2691a78075dce8f2d4e7e4a1c2cd7f33f8b	exe		Heodo
2020-09-02 10:25:13	89f641d5b6dd06091fdb51d8d2efb8a4eeebc1c68f4d15b2efd1628a0008847f	exe		Heodo
2020-09-02 10:04:44	5e53306aeb4d00b561248e478af33ae9c8fd1e70aa252046ee0cdf67296c4716	exe		Heodo
2020-09-02 09:47:46	5a0568c79920e80e157bd6e0c2822a91c78d2cab2beb769f53734e9d03e5ea7f	exe		Heodo
2020-09-02 09:33:54	bed9c4fc2436b7723deaf6a0311edf66b7b9f5cc6fcdf7adfc61cf5609db36a6	exe		Heodo
2020-09-02 08:44:34	6dd5d673725341b0790fa4f3bed96e49d656118994b0b19c38e62fd53defb39d	exe		Heodo