URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-01-24 18:08:02	46.30.215.120		Not listed	AS51468 ONECOM	DK	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-01-24 18:08:02	http://kbhmat.dk/wp-admin/protected-51366413081...	Offline	doc emotet epoch1 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-01-25 02:27:24	7a257b44a9fb62afa665bf698344474aa5ad6ab256a2ba1692223bb491dd938e	doc		Heodo
2020-01-25 01:26:20	2c766cefc72ed82b965682d731703859bb9e88bfe41720b32db5fd80a5c1c630	doc		Heodo
2020-01-25 00:25:30	84232ef58a9e4bcd7f0694bb51bf6ddf5969514899f00cee26e1a3d01ed204b2	doc		Heodo
2020-01-24 23:54:37	de72ecd5468e8d098273998dbaaa0402d34eb0966456c717a0c5adc75b3ac2ba	doc		Heodo
2020-01-24 23:24:08	051068762703a365ffb6c23bce9729d7c58f0cff7656580f486c6ce128f9e930	doc		Heodo
2020-01-24 21:53:19	c20bb59f9e7d85bf81173ebe6277c9d3961963762d212abcec41f05238d3e2e6	doc		Heodo
2020-01-24 21:05:41	6e2849e95899be9e5dccb845f0e4b59960b7a426309244d398377ed059feef3d	doc		Heodo
2020-01-24 20:50:41	a4ebb7bf9eda6bed80e85600dc0ef35e2df109053e7925adc5e7e7b8bf4fc432	doc		Heodo
2020-01-24 19:36:22	fadb42916d1b74f1293ad6a0fb9e79a5d8c485ad3dca747689a927986e2aff08	doc		Heodo
2020-01-24 18:08:02	baf3898f045af2f01401e0a8f1ef124cfbf9a2418091b10690e01f9bb3c7cc47	doc