URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-29 11:00:45	104.195.4.226		Not listed	AS22552 ESITED	US	yes
2020-08-20 12:26:19	45.207.49.70		Not listed	AS133199 SONDERCLOUDLIMITED-AS-AP	NL	no
2020-07-21 01:08:06	185.243.241.155		Not listed	AS24544 Overcasts-AS-AP	HK	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-21 01:08:06	https://lwzmy.com/logreport/LNGwoQlM/	Offline	emotet epoch3 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-07-21 16:55:43	8f2396b025387a14460d541c1941ed6cbca5b26590a9eabcc749d5d10cc13ac8	exe		Heodo
2020-07-21 16:40:20	9932ca07ffb17bece0297f335a66901dfc687c6883a324f1b5295c0fd335d566	exe		Heodo
2020-07-21 16:22:42	61b46efd619532bb0347db38fab651de0ae0f34ebe63283d8701901e5392c950	exe		Heodo
2020-07-21 16:12:09	a702c367f24f0559bbbbd96f4155b4ce7df08ef7788fd7f65d44ebabf701651e	exe
2020-07-21 15:56:04	78b0dbb2b47ee301b6af3bd84ad6cb0dc37017f09f3353d60c7d1870d15d704a	exe		Heodo
2020-07-21 15:42:15	87bb5d91eeec4780c41b84f67b9a8dc573bfe804a77567fdfa7e98bc0d8b1253	exe		Heodo
2020-07-21 15:27:49	4f9d39d720e81345589d7999d1ea62cffd52778e41bd3c6dc798f32b71ab8ab1	exe		Heodo
2020-07-21 15:15:36	2c491f7331e4248b6cba74eb9b03ec41068a192d4dec985056d7ba5807764066	exe		Heodo
2020-07-21 15:06:03	b8b52761579996953a34bebec3ad82cd4b6572a48da766d1aafe972c72672e9f	exe		Heodo
2020-07-21 14:50:58	198042710c3900347336529a309b407557c1defb26c12241564e23fea70f21f0	exe		Heodo
2020-07-21 14:23:34	b1c397ab9be2b4aba5f939f732f58ba283d3067f69cf49ed4bac105a8e95276e	exe		Heodo
2020-07-21 14:01:20	1a3b1321f13c9e64460a6bcb57cdfb441ca47fa2dd8241c868d6c5bad0000c11	exe		Heodo
2020-07-21 13:46:52	f610586c828e66f99ebee4619a20afa4f090a9610e866fbeb2bceb7a9403099f	exe		Heodo
2020-07-21 13:28:44	74f04f2bb0c6960d0289857de208125a10222cc03b595875b764acac723a86a2	exe		Heodo
2020-07-21 11:56:54	97a0fc1525d624ec3e08350fa0adec3c9cc6e1a1999d634435b13a80e17745bf	exe		Heodo
2020-07-21 11:29:08	24c55e46e1265824de9e2ed26fdc2243271ffe13151818b9ff6680a1e1e66d1b	exe		Heodo
2020-07-21 11:27:55	6e9a04a5acf5a1b4f9cde5a6bbe2db606d1109bc5ef828da682221460bf92b91	exe		Heodo
2020-07-21 11:11:23	339836724d78b1aa004b6c00450138cf7830d2ee82b0c2fc7cd1d0920cdc9b13	exe		Heodo
2020-07-21 10:57:42	086cd4e11ffc377241a7e4ab0e1a8f1e97ff2cdcbdbec8c42d72895d0f6a7ed4	exe		Heodo
2020-07-21 10:38:24	3babe69b6e595230e677c62e08064dbf90e1a37366697b4a388e5af6d3f71378	exe		Heodo
2020-07-21 10:20:39	391d36e7e58fe7e5c3a1c641fd452c14e61e6726393f4ecd7abe2a7f6502879b	exe		Heodo
2020-07-21 10:07:37	e31921d24744cb464919723235ecc705858ed0f87734fcbebfe9db8a3e9e7143	exe		Heodo
2020-07-21 09:53:37	d16a0e8e35120a55763ab353c4ebbecf23b8ece0d8d9723c8dedf9620ea5c4e1	exe		Heodo
2020-07-21 09:36:24	2437531b747fa360dfc32c34ebf83f72b6d883d949b67bbf716fe378cb6afc05	exe		Heodo
2020-07-21 09:24:14	cc80ca0ab388ab94a5fa0bedf1ce7c96ff23c69118bf722f00ea352f7e08c0af	exe		Heodo
2020-07-21 09:05:06	30ecd65979b457a111134537eb4e27868c3637e5ab7f11b8e90d025d4feb16a0	exe		Heodo
2020-07-21 08:52:24	66a5244d524c07b352139dc950ec8d1166b0eb9cb3f939199eb82f44ceec035e	exe		Heodo
2020-07-21 08:33:57	0bc94a3ba526b7b15a3219265b6049a414659a242de50dadaf8168cecd18772a	exe		Heodo
2020-07-21 08:20:25	bc11041149b4b7023b8543e09b27ac49c61f8b202bec0e2270f1a309a1d02456	exe		Heodo
2020-07-21 08:08:17	86e7fa04afb1cd0d626f71ee2b29df58806fa9e17879d9270cf6cbc44eaa8627	exe		Heodo
2020-07-21 07:56:50	1fdc1b65a9d56c2bd5e2b13059e40af70737cdd14deaabf3e1a7f49f3d26ba2a	exe		Heodo
2020-07-21 07:42:14	fb302ad33ff58b173b333726f4f50ac94b4217ff74e3c4dd353c1ca05c58d967	exe		Heodo
2020-07-21 01:08:05	93b8c01cd09d80c3310f34d54afd0ca088b6250b8a64aff903672b9ddbf32130	exe		Heodo