URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-07-15 02:42:25 | 34.41.139.193 | 193.139.41.34.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM |  US | yes |
| 2025-06-14 05:55:33 | 107.20.199.112 | ec2-107-20-199-112.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
| 2025-06-14 03:34:39 | 54.82.141.78 | ec2-54-82-141-78.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-06-09 06:25:23 | 3.91.114.160 | ec2-3-91-114-160.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
| 2025-06-08 09:40:58 | 52.20.202.168 | ec2-52-20-202-168.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
| 2025-06-03 00:18:14 | 44.220.98.42 | ec2-44-220-98-42.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-06-03 00:18:14 | 3.212.202.212 | ec2-3-212-202-212.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-05-26 12:41:48 | 52.0.95.112 | ec2-52-0-95-112.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-05-26 12:41:48 | 54.82.120.89 | ec2-54-82-120-89.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-05-23 07:20:22 | 3.216.41.22 | ec2-3-216-41-22.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-12-29 15:02:05 | http://hihab.co/__MACOSX/nkyEFIckbO9gMaMynZEYDj... | Offline | doc emotet  epoch2 heodo |  Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-12-30 06:23:39 | f63df71b55e2e7d9874fbfe9d3dc6fb6bcdaac70deec04341d0e98350e9b2687 | doc | Heodo | |
| 2020-12-29 15:29:53 | 3220a607cad214a83f7491a28fab782cba46277dad8762d709daf628333b2b4e | doc | Heodo | |
| 2020-12-29 15:08:23 | 45d8bc6c35fbbb07e2a164434082d5659b1a53769f01d35cbae03741ddf981ca | doc | Heodo | |
| 2020-12-29 15:02:04 | a2716d55c3b2823a856e3308aefdd3883d63ce417c4e6013858bf14c80f48b29 | doc | Heodo |