URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	majesticraft.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2018-06-06 13:25:01 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-10-04 21:42:03	13.248.243.5	a16e665f42988324c.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-10-04 21:42:03	76.223.105.230	a16e665f42988324c.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2019-08-22 04:57:49	204.11.56.48		SBL494567	AS40034 CONFLUENCE-NETWORK-INC	VG	no
2019-06-05 13:44:27	54.72.130.67	ns1.ibspark.com	Not listed	AS16509 AMAZON-02	IE	no
2018-06-06 13:25:02	217.146.91.100	100.91.146.217.baremetal.zare.com	Not listed	AS25369 BANDWIDTH-AS	GB	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2018-06-12 06:50:03	http://majesticraft.com/ema/Payment%20Advice.exe	Offline	eldorado exe Loki	oppimaniac
2018-06-12 06:50:03	http://majesticraft.com/ema/Panel/Payment%20Adv...	Offline	CVE201711882 Loki RTF	oppimaniac
2018-06-07 08:06:03	http://majesticraft.com/ema/PO.exe	Offline	eldorado exe Loki	oppimaniac
2018-06-07 08:06:02	http://majesticraft.com/ema/PO.doc	Offline	CVE201711882 RTF	oppimaniac
2018-06-06 13:26:05	http://majesticraft.com/me/015543672432450.exe	Offline		JAMESWT_MHT
2018-06-06 13:26:04	http://majesticraft.com/emzi/Purchase%20Order.exe	Offline	HawkEye	JAMESWT_MHT
2018-06-06 13:26:03	http://majesticraft.com/dean/Purchase%20Order.exe	Offline	Loki	JAMESWT_MHT
2018-06-06 13:26:02	http://majesticraft.com/deedee/ke/fdee/Purchase...	Offline		JAMESWT_MHT
2018-06-06 13:25:02	http://majesticraft.com/me/Panel/01554367243245...	Offline		JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type
2019-11-30 10:05:38	4c7d08f1d6fac569c83fa87b42a3a727668da55317954637ce500d59e058fe03	html
2019-11-30 10:05:38	b5378a12e359a27a0c92f53fefa2b4c21673781b7e76f54495d58ad72a927839	html
2019-11-30 10:05:07	8dfbf98adfb38f0b612d15b4baccb23de19cf12dee36c9897708d62aaab6d308	html
2019-11-30 10:05:07	e2be88fd3dc7349ec9c3cd296b5f4241061ee5462e7d04d5425359a27b2122d2	html
2019-11-30 10:05:05	2d1412c610cb72983985fe0b8180e9729a3f853d7773d76430cc7243ac21b110	html
2019-11-30 10:05:05	9f96d68b285d4f7e4a82ef42e626ec4f96a94c9c61a2c7fcb699a762b1abb487	html
2019-11-30 10:05:05	0b58f7b7589a179527fd871b3a87cb2f23650c018cdc835444fad474896ba8b8	html
2019-11-30 10:05:05	8cf065293ca696f2560a8dde153a0ddd3144a32a9c3f10a82caf58d6e0b64c3c	html
2019-11-30 10:05:05	8cf065293ca696f2560a8dde153a0ddd3144a32a9c3f10a82caf58d6e0b64c3c	html
2018-06-08 09:14:14	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855	unknown