URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	kelas.yec.co.id
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-08-14 13:56:03 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	15

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-09-28 07:26:36	103.93.53.160	jkt.biznetg.io	Not listed	AS133800 IDNIC-BIZNETGIO-AS-ID	ID	yes
2020-08-14 13:56:06	104.18.44.72		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-08-14 13:56:06	104.18.45.72		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-08-14 13:56:06	172.67.208.99		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-08-18 03:52:22	172.64.194.9		Not listed	AS13335 CLOUDFLARENET	CL	no
2020-08-18 03:52:22	172.64.195.9		Not listed	AS13335 CLOUDFLARENET	CL	no
2020-09-09 11:47:56	172.67.219.112		Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-27 16:02:20	https://kelas.yec.co.id/srjns/B/	Offline	emotet epoch2 exe heodo	Cryptolaemus1
2020-08-19 07:29:05	https://kelas.yec.co.id/srjns/Reporting/p2fgjpy5/	Offline	doc emotet epoch2 heodo	spamhaus
2020-08-17 07:24:08	https://kelas.yec.co.id/srjns/open_76626688881_...	Offline	doc emotet epoch1 heodo	spamhaus
2020-08-14 18:19:31	http://kelas.yec.co.id/srjns/browse/cbrb06fw2mf...	Offline	doc emotet epoch2	Cryptolaemus1
2020-08-14 13:56:06	https://kelas.yec.co.id/srjns/browse/cbrb06fw2m...	Offline	doc emotet epoch2 heodo	spamhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-08-27 17:30:25	bb8a3aba821edfb5b96eb2635206bf6b35a4d30f80f030c1935d0b9e260e5e41	exe	Heodo
2020-08-27 17:03:26	622e246a98556396676341db12d2b0f64da6bc7ba221a3db77d935892dc8b48a	exe	Heodo
2020-08-27 16:44:41	711e08ef37da474fddf4c2d7b7057b6c80df201324cbdcdda2b338b9f7f0e8a5	exe	Heodo
2020-08-27 16:30:10	5d6676be0a20f4287074832757024e027e06075abd248e5a81a62f9d0ce0e64c	exe	Heodo
2020-08-27 16:06:44	3f748a654a017fc201cce4e631f2ae5910225894af0f1706fa2ca242e922b3ca	exe	Heodo
2020-08-27 16:02:20	eaab6eb28bbaec308cb8e95fb0c5d5ae3262e1c14c10e930ebc99d680c37d719	exe	Heodo
2020-08-19 07:29:05	317d2f8e83008f34a6bd087c3bd315ffeea7fe3907e53cba8990a47f2e5d5232	doc	Heodo
2020-08-17 07:24:08	c7ba89f79713360deefdde1c2f93a3fa847cd2ef30a2ad319412dc06f21d9123	doc	Heodo
2020-08-14 15:08:09	f63f10c76f2b6b2a83ab7db285bcb34995b5777deb95e87bc6a9255f4e63a634	doc	Heodo
2020-08-14 14:43:57	195495f81ec757b286d74776c59ace3b717a02c3f357abc851fe9702008f66f7	doc	Heodo
2020-08-14 14:18:45	062fc69188911892d65d155ba828eeb25b0662d9e9b399a14f718ede3c62d538	doc	Heodo
2020-08-14 13:56:05	85d7f79361771714db5769eebd7770eb8d530728ee9553b739884f203829cce5	doc	Heodo