URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: itchek.fr
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-09-29 12:43:11 UTC
Total malware sites :1
A record(s) observed :3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-05-05 09:34:24 217.154.19.245Not listedAS8560 IONOS-AS- FRyes
2020-09-29 12:43:13 93.90.202.32Not listedAS8560 IONOS-AS- DEno
2025-04-28 23:46:53 217.160.0.211217-160-0-211.elastic-ssl.ui-r.comNot listedAS8560 IONOS-AS- DEno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-09-29 12:43:13https://itchek.fr/ancien/Scan/wue2bou3zfeiw482/Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-09-29 13:48:408078b412ef203fae6fb0c994b5c8fd9a2bf69be9870b623ce2e3eb3b54466d4edocHeodo
2020-09-29 13:26:35aef1553160a730913e114ff63310a0511bb11b89cc95e591abbe55dfc55f5098docHeodo
2020-09-29 12:58:03648be0aa3c7200ffc546fb744d1cafb15c159dd273a13afc064ce340d02b608fdocHeodo
2020-09-29 12:43:128002caa170e531cfdab75c3470478f6a2a7e1324b9ae2e13fcb1b3e4e98494cedocHeodo