URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	madivarealty.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-10-30 05:33:02 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	14

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-09-18 00:00:16	188.114.96.3		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-09-18 00:00:16	188.114.97.3		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-05-09 12:42:35	104.21.112.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-05-09 12:42:35	104.21.16.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-05-09 12:42:35	104.21.32.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-05-09 12:42:35	104.21.48.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-05-09 12:42:35	104.21.64.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-05-09 12:42:35	104.21.80.1		SBL681411	AS13335 CLOUDFLARENET	n/a	no
2025-05-09 12:42:35	104.21.96.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-28 13:28:11	204.11.100.4	4.100.11.204.in-addr.arpa	Not listed	AS19133 BIRD-HOSTING	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-31 04:45:06	http://madivarealty.com/wp-includes/aKGdOG0oymA...	Offline	doc emotet epoch2	Cryptolaemus1
2020-10-30 05:34:06	https://madivarealty.com/wp-includes/aKGdOG0oym...	Offline	doc emotet epoch2 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-10-30 07:46:58	f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948	doc	Heodo
2020-10-30 07:12:55	9ae7942321b9360d2c19a2199e6f2e21a3436b97787133280c3d267a00bd6b6f	doc	Heodo
2020-10-30 06:42:47	7936fd61383857a4def1dbe2e3c320a04038eaeb4eac1d4c313a7dcf3dcd3cdf	doc	Heodo
2020-10-30 06:15:57	3619ca27723e87006b7061bd608e1e02d5087392ec513cfe82ecec069074fbd7	doc	Heodo
2020-10-30 05:55:15	2a2cd3fa6ea3c1207553da6896b030a743a3893ec1b95b494ba27d6423f8857d	doc	Heodo
2020-10-30 05:34:05	248dc97004f5088a900ec8be3559432f63cfe88eb7d2935c5161846dc778d1fa	doc	Heodo