URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | keyvalue.in |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Not blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2020-10-27 12:06:02 UTC |
| Total malware sites : | 4 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 4 (100%) |
| A record(s) observed : | 7 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 16:46:41 | 13.248.213.45 | a67c48129651a0940.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-04-27 16:46:41 | 76.223.67.189 | a67c48129651a0940.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2020-12-17 02:43:35 | 103.159.239.49 | m49.m21.co.in | Not listed | AS141294 M21IDC-AS | IN | no |
| 2020-11-03 14:32:14 | 103.143.173.32 | Not listed | AS213719 netuv | TR | no | |
| 2020-10-27 12:06:05 | 172.67.218.169 | Not listed | AS13335 CLOUDFLARENET | n/a | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-10-29 16:25:17 | http://keyvalue.in/demosite2/unhF26bONGhtoQkhAW... | Offline | doc emotet | |
| 2020-10-29 14:04:07 | https://keyvalue.in/demosite2/unhF26bONGhtoQkhA... | Offline | doc emotet | |
| 2020-10-28 00:55:11 | http://keyvalue.in/demosite2/paclm/BrxyxtSQdbDX... | Offline | doc emotet | |
| 2020-10-27 12:06:05 | https://keyvalue.in/demosite2/paclm/BrxyxtSQdbD... | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-10-29 16:25:17 | 318b758c5ef22b3666ff9ea38111751a4ccc591294bf85680f723e02f95def57 | doc | Heodo | |
| 2020-10-29 15:27:58 | 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829 | doc | Heodo | |
| 2020-10-29 15:01:59 | 4d79f7b9c974fdf5e44ca20f71261e3064ea8bae3f64370f06b74c2bce894b67 | doc | Heodo | |
| 2020-10-29 14:25:49 | 5ed767510e9b2630ac3c6ea38470821c0c85acaf712cb5f45eddd5f6e0fcdc17 | doc | Heodo | |
| 2020-10-29 14:04:07 | dd1f36356c3a35bd4fa5c58dbc9798b01714e04d123539649c3932a8164288b8 | doc | Heodo | |
| 2020-10-27 12:39:50 | d768379869d9f34631ab847a39f58231bcc0726c403f07b19eb86f9176552f64 | doc | Heodo | |
| 2020-10-27 12:20:13 | dcaf45ccbdbfbce15aa5336344a83cd971545a936fea7c15ac0bf49bf93a5286 | doc | Heodo | |
| 2020-10-27 12:06:05 | ac2d682f7339ed4a56d468128194a5d4ec19b4e2277066bb429621f6dfe9a741 | doc | Heodo |
US
IN
TR