URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	jimmyjohansson.net
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2018-07-18 23:47:43 UTC
Total malware sites :	11
Online malware sites :	0 (0%)
Offline Malware sites :	11 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 08:15:31	185.189.49.216	ns3.inleed.net	Not listed	AS206170 Inleed	SE	yes
2018-07-18 23:47:45	5.150.195.197	ns3.inleed.net	Not listed	AS8473 BAHNHOF	SE	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2018-11-19 19:51:08	http://jimmyjohansson.net/INFO/En_us/Important-...	Offline	emotet heodo	cocaman
2018-09-15 13:15:21	http://jimmyjohansson.net/INFO/En_us/Important-...	Offline	doc emotet heodo	Anonymous
2018-08-21 08:01:28	http://jimmyjohansson.net/0APBTBSMX/PAYMENT/US	Offline	doc emotet heodo	Anonymous
2018-08-21 04:42:03	http://jimmyjohansson.net/905UFHDEUX/PAYMENT/Pe...	Offline	doc emotet heodo	Cryptolaemus1
2018-08-17 18:54:21	http://jimmyjohansson.net/905UFHDEUX/PAYMENT/Pe...	Offline	doc emotet heodo	unixronin
2018-08-17 03:36:00	http://jimmyjohansson.net/Wellsfargo/Personal/A...	Offline	doc emotet heodo	Cryptolaemus1
2018-08-08 06:41:04	http://jimmyjohansson.net/LLC/RKZ1134589QZ/Aug-...	Offline	heodo	zbetcheckin
2018-08-08 05:50:22	http://jimmyjohansson.net/LLC/RKZ1134589QZ/Aug-...	Offline	doc emotet heodo	Cryptolaemus1
2018-08-03 04:25:02	http://jimmyjohansson.net/DHL-Express/En_us/	Offline	doc emotet heodo	Cryptolaemus1
2018-07-25 03:58:33	http://jimmyjohansson.net/files/EN_en/Past-Due-...	Offline	doc emotet epoch2 heodo	Cryptolaemus1
2018-07-18 23:47:45	http://jimmyjohansson.net/doc/US_us/OVERDUE-ACC...	Offline	doc emotet epoch2 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2018-08-22 08:52:34	ce0f0e0d8bbad2167369ba230b45a02bb02ca5fc65ea8a8a18f0f6529c283bd1	doc	Heodo
2018-08-22 03:27:36	78f489ff158b9383ff9452fb42f0e318c8dc04c1dd93e3c4f4ee69eeca4e0919	doc	Heodo
2018-08-03 15:30:26	497be5f773cd826c4e352aef2ba0ceac18117e7709a3353a413eef2fddfef2ae	doc	Heodo
2018-07-25 21:35:17	060a0fc2dc33ae11af40e99b36563ac2b3cdbe59e7e538f1a0a0832480e8c74c	doc	Heodo
2018-07-19 06:02:20	5da441a5129f4d0cb8ab72d45b985fb9238218eee413835e1c6d94686fad9d5d	doc	Heodo