URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | kimberly.digital |
|---|---|
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Not blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Not blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2018-08-20 20:22:02 UTC |
| Total malware sites : | 2 |
| Online malware sites : | 2 (100%) |
| Offline Malware sites : | 0 (0%) |
| Newest active malware site : | 2018-08-21 08:00:23 UTC |
| Oldest active malware site : | 2018-08-20 20:22:03 UTC (Age: 8 years, 3 months, 18 days, 13 hours, 12 minutes) |
| A record(s) observed : | 12 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-10-14 23:37:43 | 54.215.31.113 | ec2-54-215-31-113.us-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 |  US | yes |
| 2026-09-12 17:44:18 | 185.53.179.128 | Not listed | AS61969 TEAMINTERNET-AS |  DE | no | |
| 2025-04-27 08:57:27 | 52.20.84.62 | ec2-52-20-84-62.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
| 2025-12-26 16:13:17 | 43.110.47.247 | Not listed | AS45102 ALIBABA-CN-NET | US | no | |
| 2025-12-26 16:13:17 | 43.110.47.249 | Not listed | AS45102 ALIBABA-CN-NET | US | no | |
| 2025-12-10 17:08:20 | 47.251.116.197 | Not listed | AS45102 ALIBABA-CN-NET | US | no | |
| 2025-12-10 17:08:20 | 47.251.245.243 | Not listed | AS45102 ALIBABA-CN-NET | US | no | |
| 2025-10-16 01:18:30 | 199.59.243.228 | Not listed | AS16509 AMAZON-02 | US | no | |
| 2025-08-12 19:03:00 | 194.195.220.41 | 194-195-220-41.ip.linodeusercontent.com | Not listed | AS63949 AKAMAI-LINODE-AP | US | no |
| 2025-05-09 10:26:40 | 13.248.169.48 | a904c694c05102f30.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2018-08-21 08:00:23 | http://kimberly.digital/default/EN_en/Paid-Invo... | Online | doc emotet  heodo | Anonymous |
| 2018-08-20 20:22:03 | http://kimberly.digital/default/EN_en/Paid-Invo... | Online | heodo |  JayTHL |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-10-20 23:37:33 | ca17c966e5188deb7d8cd952bc6b7f6bd20dcfb61ec3acb92db23d24d1f6a0f7 | unknown | ||
| 2026-10-19 16:07:41 | ca17c966e5188deb7d8cd952bc6b7f6bd20dcfb61ec3acb92db23d24d1f6a0f7 | unknown | ||
| 2018-08-22 08:54:14 | ce0f0e0d8bbad2167369ba230b45a02bb02ca5fc65ea8a8a18f0f6529c283bd1 | doc | Heodo | |
| 2018-08-22 08:48:58 | ce0f0e0d8bbad2167369ba230b45a02bb02ca5fc65ea8a8a18f0f6529c283bd1 | doc | Heodo | |
| 2018-08-22 03:28:19 | 78f489ff158b9383ff9452fb42f0e318c8dc04c1dd93e3c4f4ee69eeca4e0919 | doc | Heodo |