URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	lehnhausen.nl
Domain registrar:	n/a
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-05-17 16:28:08 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-05-17 16:28:09	128.140.217.48	fxw01.rpos.nl	Not listed	AS48635 CLDIN-NL	NL	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-05-17 16:28:09	http://lehnhausen.nl/wwvv2/TPuvLWwtaCwvAeGThTlQ/	Offline	dll emotet epoch4 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2022-05-17 18:20:10	928a7643bf0484c8c7a8cc105e935c4ee9857593316d23595004af3719ef2ae3	dll	Heodo
2022-05-17 17:51:55	88290574160dd12200a5337279cbc3ea9204eb7efa5e78f03d6cc748f3d245d0	dll	Heodo
2022-05-17 17:40:33	806e3244b1cb4460d2ce6d4085f436d8d322b958e922823e2cebdae3a32b84a9	dll	Heodo
2022-05-17 16:58:33	d30c12dfc635b341155e4a8c2795113ba04a86ee06f0c093345b2fc11ef0c136	dll	Heodo
2022-05-17 16:28:09	6050d2f7c6739c0c5f5567b4c1978b1a8ec66b1ad84e947b07703956ea1e1624	dll	Heodo