URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-30 15:50:36	81.169.145.157	w9d.rzone.de	Not listed	AS6724 STRATO	DE	yes
2020-08-31 16:06:16	81.169.145.151	w97.rzone.de	Not listed	AS6724 STRATO	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-31 16:06:16	http://lennarz.org/cgi-bin/XRW/	Offline	emotet epoch1 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-09-02 06:31:00	6dd5d673725341b0790fa4f3bed96e49d656118994b0b19c38e62fd53defb39d	exe		Heodo
2020-09-02 04:38:41	598bea746526d6eae854e126eac4b4b22e1023363875c53142ef4b05491fdcb2	exe		Heodo
2020-09-01 20:45:10	b6f2457e50dc2fdd2cf809ebf63577c7277e0e26bf8e87188572c01d96d48f97	exe		Heodo
2020-09-01 18:34:39	fb13df8b0a039ba2084a3a5e4214347716b56fdbd7f3c708717bb439acce3656	exe		Heodo
2020-09-01 18:20:24	ab531a85f9cd8dfe045c6653fd19d386eb4d380f5051cb8171362a7c11abf369	exe		Heodo
2020-09-01 18:02:34	f110cead36ce69529333fa52eb015836d4532db514dfcd94cf86c9f3d2f254cf	exe		Heodo
2020-09-01 17:44:19	2c1686e759dbbd5bc9d8ab2e42a0f4ba25864da3a8070e96c9d5267214b0cb05	exe		Heodo
2020-09-01 17:31:19	cdde68356e406b3cbc4ec6b4115e1d39500b1cdff3bfae70a80571e22e60007e	exe		Heodo
2020-09-01 17:21:06	70fb173d79d46a7d93995eb273a9f5ea8b094d1d7170267304cf2af9f60f45ce	exe		Heodo
2020-09-01 17:05:53	a783e6d04e03f59a8700ab7f43f6fa2e0c766cad8636b26232d695a73ffce7ea	exe		Heodo
2020-09-01 16:51:19	0fcc4d8e44bd9befd0e39b6509cae0f9ab1a96ed6faa69efa591f5365ef7b78d	exe		Heodo
2020-09-01 16:34:15	f08f87bcf8e0a6c3e83f4225c524f64b65166ea3d98fbc0162c4d4f98eb03760	exe		Heodo
2020-09-01 16:19:47	30f394c5a4330f0c285f6c9860f354b569b27eb3c808587ddc22380683167dfb	exe		Heodo
2020-09-01 16:04:18	7126c88e921c10922f86ab8318ebca51723d95bb99ab4482b8501820f6ae5582	exe		Heodo
2020-09-01 15:44:04	3f4690cfd69f12cfea4d2f06bf4bdb1a82bf5f6a743a36cb58a27f4f153a0be8	exe		Heodo
2020-09-01 15:21:04	785c23bf6f8216398ab8db531f523051614348215d6bbb3596d17858cd614d62	exe		Heodo
2020-09-01 15:05:33	27827ee9224ded5877035f0a89ad499d953c48c51516f123403916c23bfa5f06	exe		Heodo
2020-09-01 14:44:03	7344f185b59bcba3a74ccece98d0bde3414262ce98d13e7b8ca8346077e09818	exe		Heodo
2020-09-01 14:27:31	37ac2806749250e326ba770de88aaddb7e6264be2b60603c80fc03d06812c5ef	exe		Heodo
2020-09-01 14:04:54	d85a3e4f9c1537443434349685b34b7432172592c93d55de871fa6cd087a1c4b	exe		Heodo
2020-09-01 14:00:57	7271e6ce824688d65bb99149f558f7d195a12bf7d5ce62fab1dcd2eebd120fff	exe		Heodo
2020-09-01 13:48:06	f42b38b74220cd621e2922ccdbdde5b2ced3c7682a020fa2f1cc264fd96d5224	exe		Heodo
2020-09-01 13:31:48	3cb36715b4646e8ec823546811db52b56ca6abdadd07354bb0ed94d702bb442c	exe		Heodo
2020-09-01 13:18:05	ffd738b9352c11c5d53583c2babffaaa598e959e3c8d1281b5da4a46d1316189	exe		Heodo
2020-09-01 13:01:27	32df4b0ba13d96fd249dde7e303fcf9ab9116c6ff871b96266bc05924c1baee8	exe		Heodo
2020-09-01 12:45:57	3a1b04e761a3aa14a531876a9fd5620cc20a704c57bc9fd3f00491655eb79eaa	exe		Heodo
2020-09-01 12:34:40	c67601bd787fc7067ed7e37e82a5493a831d3eed8d7325c83ec2da1d1cd0b7bc	exe		Heodo
2020-09-01 12:21:03	0fc82c2a808895f9ed708ba816d268a9f7f793182a2dc769f68b17454730b421	exe		Heodo
2020-09-01 12:05:00	584d67d500e4201488d6a9ec7c0a2667af8e7f1663ba2e5b126f549451173c32	exe		Heodo
2020-09-01 11:50:45	454d403ba17aa58726c18a6b8c60bd0d344f131ce7f8d5f5008aa0ad29514cce	exe		Heodo
2020-09-01 11:34:50	dae01ebbf46c3ca0d003e0907d87334e21653b59a091f4c30d79a8cdc9c2d493	exe		Heodo
2020-09-01 11:18:30	ee9ec7393dd2797f59357c3f5a52dab0e4ed424d88a11c416e242e6032cd9e2d	exe		Heodo
2020-09-01 11:00:39	4930169bd82052d6f89ffdf79787c7b3e969adebb486e3827a80ebe14cc11c0b	exe		Heodo
2020-09-01 10:54:47	eca9f8a4ab538969334839d8f60675dafded964a0b5c46425fd82c62a92fbcf6	exe		Heodo
2020-09-01 10:30:21	b637e2897a433526e71c97e75b7a2054021240ddbc29830ed8522278210e913e	exe		Heodo
2020-09-01 10:18:18	3b0fcf6ea6c799df29751fa8089043194e312b07fa9e80f51e29376057b17df0	exe		Heodo
2020-09-01 10:01:16	5730958c17aae1f826396c7e1d32437bfcc39f087627fa3059b9357e932d750f	exe		Heodo
2020-09-01 09:50:40	4e3fb1fea7000d551ab0e758e600c67215b34106190b0369ba6188f287ace1c5	exe		Heodo
2020-09-01 09:34:15	d4b63eb330dcd2cdfd77629ee49e3bf7f3a20c4f47801059adfbf7ddcb269ff2	exe		Heodo
2020-09-01 09:10:18	28d2c3169c6ed9d514546c51eaabc1de70773e2ab67f89f530cc79779ebd6a5e	exe		Heodo
2020-09-01 08:55:24	ff65bbcfe09035fe43019f9fde6edc954730fe43cab3643d7573da006e5ca867	exe		Heodo
2020-09-01 08:38:17	4b4df15f29709c3a3f7eb38b19406f85d6ce2142e64bc4bdb649f092b7689934	exe		Heodo
2020-09-01 08:32:26	c54055c362c3ca5c559c832f96a5111c73bcdeaa07734b029a64672cced53120	exe		Heodo
2020-09-01 08:06:36	554e872959ad3b6bc990796c3fe92df2bfc029b0cca023788088938243e2ba57	exe		Heodo
2020-09-01 07:53:02	5ed4ba643a325a0f51e028599e74594215cedf5b65f5a3c8d977297c03713e0d	exe		Heodo
2020-09-01 07:34:44	5b693aec596b3e7408fe37e2300c5681c70c5a08ed4506c936a63a4507721b95	exe		Heodo
2020-09-01 07:20:45	752d7637cf1b7e8c77f338144c1f0b76ee6a32841d3c09c0320dd5b443fb2d5c	exe		Heodo
2020-08-31 22:56:22	2db0758d60d1e61b6c69778283df5dde77c84cc771b29953c9821433f348b336	exe		Heodo
2020-08-31 20:11:39	efedcc357becbda9b72bf2ce4c4886bb66c4a7560a60286961d39a5e28db46c4	exe		Heodo
2020-08-31 18:30:40	ea17f66ea1428d971e73160197d768fd962328761e683b29a222b76c3fcf7649	exe		Heodo
2020-08-31 16:06:16	b7f07a690cd50f5f722ef1b5a7a940a5c64e341f6a46f94c4dcbe10f18d6b516	exe		Heodo