URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-05-02 04:52:12 | 66.29.146.58 | premium230-5.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET |  US | yes |
| 2019-09-18 08:02:40 | 50.63.202.46 | 46.202.63.50.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-09-23 14:57:31 | 50.63.202.61 | 61.202.63.50.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-09-21 08:23:30 | 184.168.221.54 | 54.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-09-17 06:30:59 | 184.168.221.35 | 35.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-04-12 20:39:00 | 23.91.67.9 | server.innovawebserv.com | Not listed | AS46606 UNIFIEDLAYER-AS-1 | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2019-04-16 05:59:15 | http://imagyz.com/cgi-bin/28ugly-dhs0b-bjewh/ | Offline | emotet  heodo |  spamhaus |
| 2019-04-12 20:39:00 | http://imagyz.com/cgi-bin/rlMK-JPN6xiCMYb7KgsG_... | Offline | emotet heodo | spamhaus |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-11-30 12:49:54 | 1eed5b2f7c57e672dfefc0b4f013f49f76deb3603da453f48fd71180b00affb4 | html | ||
| 2019-04-16 11:53:29 | eaebef573b834cac77673e625c36f4e363a94a294e37a18e68547a3b19308fdb | doc | Heodo | |
| 2019-04-16 11:20:31 | 90c260b2469174d1c60fca12bc1a31728a1219a71c5f27a5b1cf21db2271f123 | doc | Heodo | |
| 2019-04-16 10:34:23 | de95a51d1056dab1f56d407447c1028fd989fd0aa4ff8aab109f93117bc7c258 | doc | Heodo | |
| 2019-04-16 09:52:30 | 0c42ff307f9831e057e019051253081abc1001fd290feb13f5467ce2c4ad435a | doc | Heodo | |
| 2019-04-16 09:19:13 | eb68fdf25e93c5d896e8b7f3d1216c20545cf2f3b3ecac3c850d4d48dcc853de | doc | Heodo | |
| 2019-04-16 08:32:17 | cf34076fe15384682ff04d5a15a94d36af4ff3dee94d651c33c4b4c60731ed88 | doc | Heodo | |
| 2019-04-16 05:59:15 | e328f1a48cce3e9220c38d847ccea9f81b6135d120bd76b224c4be21405f700e | js | Heodo | |
| 2019-04-12 23:48:08 | d0819ed578beb38c8875532613ff761b6b4816f653ee41042f853fb87cdb592d | js | Heodo | |
| 2019-04-12 20:39:00 | 804b01b391cf622f6207d52fd43586ff8323ce6209873f2bf92609e4ef959a1c | js | Heodo |