URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	jib.qa
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-01-24 23:00:03 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	21

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-02-17 13:47:48	3.6.184.59	ec2-3-6-184-59.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-02-17 06:56:19	3.6.203.18	ec2-3-6-203-18.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-02-16 20:50:20	15.206.14.76	ec2-15-206-14-76.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-02-07 12:02:07	52.66.104.199	ec2-52-66-104-199.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-02-04 10:35:09	13.234.164.168	ec2-13-234-164-168.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-02-05 13:39:35	13.126.147.37	ec2-13-126-147-37.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-02-05 13:39:35	52.66.185.241	ec2-52-66-185-241.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-01-30 21:13:15	13.127.113.155	ec2-13-127-113-155.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-02-03 05:58:19	13.234.94.96	ec2-13-234-94-96.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2020-01-30 21:13:15	13.126.123.183	ec2-13-126-123-183.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-01-28 02:20:04	http://jib.qa/wp-admin/invoice/	Offline	doc emotet epoch2 heodo	spamhaus
2020-01-24 23:00:05	http://jib.qa/wp-admin/protected_6c7jote_1p53xw...	Offline	doc emotet epoch1 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-01-29 05:06:28	32d15d03d649b47e7e5f3735157d7c94fe94191d3dc44cac7f3cbfa7c61f91a1	doc	Heodo
2020-01-29 04:35:40	1208b26b61ee90bf9d193b78b7be525904097e614d9afe182f39e23f28b52abe	doc	Heodo
2020-01-29 03:04:53	bcb689d8bd11a69debf1f16db09a8d7f2d101b7fc3c8624a23b10619acc2ee59	doc
2020-01-28 20:31:09	69870612eec211dca6a4b7da2289fae4d1560824eeaf57088fc35b6c124c4804	doc
2020-01-28 13:44:05	7d3a3874f861a74507017ef33df30b4d919a29b0c3cd5a880fad08914d6e3e79	doc	Heodo
2020-01-28 12:12:51	29a975ae2b4e3d310e5d3bd432f4df6db24d5d3622aca20e8e0dfda95bb9d420	doc	Heodo
2020-01-28 04:41:23	33307ccd7f5730ed3d94d160b0f611d863923084439053fde9b64c5b073052eb	doc	Heodo
2020-01-28 02:20:04	6f34d2dce52f8541278440ce39d35026bb45e67e63a621e1dc4b462816bd77ab	doc	Heodo
2020-01-25 02:27:40	7a257b44a9fb62afa665bf698344474aa5ad6ab256a2ba1692223bb491dd938e	doc	Heodo
2020-01-25 01:26:20	2c766cefc72ed82b965682d731703859bb9e88bfe41720b32db5fd80a5c1c630	doc	Heodo
2020-01-25 00:25:25	84232ef58a9e4bcd7f0694bb51bf6ddf5969514899f00cee26e1a3d01ed204b2	doc	Heodo
2020-01-24 23:24:23	6ac1a717b4ccc5b9f59e24983045117253454d52129cf64406f1e24418afcfd4	doc	Heodo
2020-01-24 23:00:04	18fd8cc805b6835ae7bbf30ed4160d31b7051b3eb02428c3272dcaea03bad362	doc	Heodo