URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	kanaangroupsociety.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2018-08-01 16:12:02 UTC
Total malware sites :	14
Online malware sites :	0 (0%)
Offline Malware sites :	14 (100%)
A record(s) observed :	4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 08:42:53	185.230.63.107	unalocated.63.wixsite.com	Not listed	AS58182 wix_com	US	yes
2025-04-27 08:42:53	185.230.63.171	unalocated.63.wixsite.com	Not listed	AS58182 wix_com	US	yes
2025-04-27 08:42:53	185.230.63.186	unalocated.63.wixsite.com	Not listed	AS58182 wix_com	US	yes
2018-08-01 16:12:04	72.52.136.109	host.wonderwebmena.com	Not listed	AS32244 LIQUIDWEB	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2018-08-31 05:05:07	http://kanaangroupsociety.com/2SBKMMCM/PAYMENT/US	Offline	emotet heodo	Malware_News
2018-08-27 11:46:22	http://kanaangroupsociety.com/07958KJE/PAYMENT/...	Offline	doc heodo	zbetcheckin
2018-08-27 11:35:29	http://kanaangroupsociety.com/07958KJE/PAYMENT/...	Offline	doc emotet heodo	ps66uk
2018-08-24 08:32:17	http://kanaangroupsociety.com/006531CMKOLIUF/WI...	Offline	doc emotet heodo	ps66uk
2018-08-20 13:14:33	http://kanaangroupsociety.com/570970XXBI/PAYMEN...	Offline	doc emotet heodo	unixronin
2018-08-20 08:02:30	http://kanaangroupsociety.com/127ZDRH/SEP/Small...	Offline	doc emotet heodo	ps66uk
2018-08-16 03:38:12	http://kanaangroupsociety.com/WellsFargo/Person...	Offline	doc emotet heodo	Cryptolaemus1
2018-08-15 17:37:07	http://kanaangroupsociety.com/WellsFargo/Person...	Offline	doc emotet heodo	unixronin
2018-08-13 22:15:49	http://kanaangroupsociety.com/BANKOFAMERICA/Aug...	Offline	doc emotet heodo	Cryptolaemus1
2018-08-10 04:19:20	http://kanaangroupsociety.com/8VLLC/CX16415224W...	Offline	doc emotet heodo	Cryptolaemus1
2018-08-09 05:48:07	http://kanaangroupsociety.com/8VLLC/CX16415224W...	Offline	doc emotet heodo	unixronin
2018-08-06 20:39:02	http://kanaangroupsociety.com/sites/En/Address-...	Offline	doc emotet heodo	Anonymous
2018-08-03 05:14:06	http://kanaangroupsociety.com/default/Rechnung/...	Offline	doc emotet heodo	unixronin
2018-08-01 16:12:04	http://kanaangroupsociety.com/default/Rechnung/...	Offline	doc emotet epoch2 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2018-08-25 11:08:19	b8be31db3cf8fa74d86929a303a2ae714fb928211f14b777f4a63f2bd1854929	doc	Heodo
2018-08-25 08:52:28	cd2ca0dd480b0e65a97ac35cd701ff8d72fa18e1ac3a212e52659e5eaaf9c175	doc	Heodo
2018-08-22 03:20:22	78f489ff158b9383ff9452fb42f0e318c8dc04c1dd93e3c4f4ee69eeca4e0919	doc	Heodo
2018-08-03 11:06:09	cc1d75825dbd58e6c60c0d31d72e75666d20b54e1ffb906a4b2c6f660b421b5c	doc	Heodo
2018-08-03 09:08:54	cc1d75825dbd58e6c60c0d31d72e75666d20b54e1ffb906a4b2c6f660b421b5c	doc	Heodo
2018-08-02 17:23:07	0d24a0249b4a2a3fa40453f2aac7d086219f5d4f6f5a316ab857c4559d79cfb8	doc
2018-08-01 16:12:03	ddfa667a6805bf8b9216feb8df15b1590c340914d7142aa142ecb858d117ba9b	doc	Heodo