URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2020-10-19 20:19:08 | 97.79.236.50 | gvo23650.gvodatacenter.com | Not listed | AS46549 GVO | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-10-21 20:43:06 | https://gogvopviks.ml/prayers-to/eTrac/z6rHG3Ke... | Offline | doc emotet | |
| 2020-10-19 20:19:08 | https://gogvopviks.ml/prayers-to/Overview/JpzWx... | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-10-21 20:43:06 | 74c87529363b4abfb536c94df924723c6d3a0e119f4ed159c5fe95ab3e7d0349 | doc | Heodo | |
| 2020-10-19 21:58:45 | c2d2f7e23951c1a0d7fedce9657e927d097ed15bdf4c63bf2321bbcadc82025a | doc | Heodo | |
| 2020-10-19 21:36:44 | d9cfb4033370de561edf8d4c1eaf2e4045c764644dc930cb3e2e407bc559c51a | doc | Heodo | |
| 2020-10-19 21:14:23 | 71e4ec3e11f734f0ce73a46fcbe3079f4418154382d6389da01859b9ad74bd99 | doc | Heodo | |
| 2020-10-19 21:04:31 | 2d5db19f14ba5acd1290b35efceb0d2a5fb4b948cc627ccfd3fffa7e41136fb1 | doc | Heodo | |
| 2020-10-19 20:19:08 | d6fc8acb0c1a4b38f100335349e71cfca14003134259cd7798a9d50fe45735ee | doc | Heodo |
US