URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: manager.paskr.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-01-18 05:52:19 UTC
Total malware sites :1
A record(s) observed :3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 18:27:25 66.175.214.13866-175-214-138.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USyes
2020-01-21 18:17:58 172.104.11.20172-104-11-20.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2020-01-18 05:52:21 45.79.162.222li1261-222.members.linode.comNot listedAS63949 AKAMAI-LINODE-AP- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-01-18 05:52:21https://manager.paskr.com/tn/Offlineemotet ext epoch1 exe heodo ext dms1899

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-01-18 10:50:43ab5dc331127be64fb5120501c03de22a819a9ad88d8e17a8cc04e709900e4f6eexeHeodo
2020-01-18 09:10:42dcb01fdf8ba270d3dd024fd60a28b21f0dba6ba8624dba1207e867a13085de7eexe Heodo
2020-01-18 07:49:30de0f60a71c5505434b479a16817972de087c96549a141e9e3686d94330f539bdexe Heodo
2020-01-18 05:52:211ef1b4595879937e06eb339370eb3c01777e67d14febfc5e57ad4c333cc1ffd7exe Heodo