URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: hfye22gy.3b3kb3.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-04-24 06:54:06 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)
A record(s) observed :3

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-04-24 11:22:05http://hfye22gy.3b3kb3.com/juuu/ifhwwyy.exeOfflineemotet ext exe zbetcheckin
2020-04-24 11:18:10http://hfye22gy.3b3kb3.com/iuww/jhuimme.exeOfflineexe zbetcheckin
2020-04-24 11:15:07http://hfye22gy.3b3kb3.com/juuu/ifhvvyy.exeOfflineemotet ext exe zbetcheckin
2020-04-24 11:10:10http://hfye22gy.3b3kb3.com/iuww/huesaa.exeOfflineemotet ext exe zbetcheckin
2020-04-24 06:54:10http://hfye22gy.3b3kb3.com/uue/jieolll.exeOfflineemotet ext exe abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-04-24 11:22:056f090c1a513f10aaf8d51f740de15f53bd2660ea2b48179dfbb9fd84bd7df807exeEmotet
2020-04-24 11:18:100240cdc626a7eddf8b7d92979e1242a308a1c81b34ba3956781f923748692efeexe  
2020-04-24 11:15:075fac6cd31ff0f16528342db837798bb0767bd8a6747177492df2bf74d4c51dabexeEmotet
2020-04-24 11:10:10a549cf015c44ad2571cacf2820869e00b44fab9ca95b002a7bdc27e7848e533fexeEmotet
2020-04-24 06:54:09479e4ead60a894c73202faba0c9ebf5762fee19e7d3ceed4af66cf710bb83b05exeEmotet