URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-11-28 11:40:48 | 74.48.114.206 | Not listed | AS35916 MULTA-ASN1 |  US | yes | |
| 2025-06-20 22:43:39 | 52.9.22.111 | ec2-52-9-22-111.us-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-04-29 23:46:08 | 134.209.152.190 | rcomgps-web-app.com | Not listed | AS14061 DIGITALOCEAN-ASN |  IN | no |
| 2019-05-23 08:29:05 | 45.76.163.155 | mail.magictechnolabs.com | Not listed | AS20473 AS-VULTR |  SG | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2019-05-23 08:29:05 | http://magictechnolabs.com/wp-includes/2wol-m06... | Offline | doc emotet  epoch2 heodo |  Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-05-23 09:36:09 | ea6d7990cfe848b99d391ea3690e80fa14710973f3b7a3a151602e736062d3d7 | doc | Heodo | |
| 2019-05-23 08:50:09 | e3b73fc71fce5c6eb0769674687f1fc666118b06404f2f9578a2818e0cfa38e2 | doc | Heodo | |
| 2019-05-23 08:29:05 | d74227c79dda4c150ac8fd9c96573c702578c33030df5221b81c7b527b1006db | doc | Heodo |