URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-05-18 06:34:12 | 23.22.144.165 | ec2-23-22-144-165.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 |  US | yes |
| 2025-05-18 06:34:12 | 23.22.52.7 | ec2-23-22-52-7.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2025-05-18 06:34:12 | 3.216.88.24 | ec2-3-216-88-24.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | yes |
| 2025-05-18 06:34:12 | 3.219.96.23 | ec2-3-219-96-23.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | yes |
| 2025-05-26 08:17:59 | 46.137.15.86 | ec2-46-137-15-86.eu-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 |  IE | no |
| 2025-05-26 08:17:59 | 54.220.192.176 | ec2-54-220-192-176.eu-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | IE | no |
| 2025-05-26 08:17:59 | 54.73.53.134 | ec2-54-73-53-134.eu-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | IE | no |
| 2025-06-12 00:28:18 | 34.241.115.67 | ec2-34-241-115-67.eu-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | IE | no |
| 2025-06-12 00:28:18 | 54.228.42.199 | ec2-54-228-42-199.eu-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | IE | no |
| 2025-06-12 00:28:18 | 54.78.134.111 | ec2-54-78-134-111.eu-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | IE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-01-22 13:32:58 | http://maruka-dev.herokuapp.com/wp-includes/msuft/ | Offline | emotet  epoch2 exe heodo |  Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-01-22 18:56:00 | 148579c72faab821c16181a5cb7a620b3ca5c83105f2e10dfe0e52e2b3e62a83 | exe | Heodo | |
| 2020-01-22 17:35:41 | 91b6b13b3608a91da43fec4f720dd3e0607719325b8e72034e93f2cbff0d04c3 | exe | Heodo | |
| 2020-01-22 16:31:43 | 981ded76f1845a62790716c4f38aa730559eb03a1a7dc385b3eb585662a6725b | exe | Heodo | |
| 2020-01-22 15:11:32 | 5336d54699c5f21886c781439f09251b6c2cfc6f88f7c25a8ef3bcfea62ccb79 | exe | Heodo | |
| 2020-01-22 13:42:57 | d45b94ebd758c9656242d3fcf9c0ded2a4b951f178488c05afdc12c990287fd0 | exe | Heodo | |
| 2020-01-22 13:32:58 | 786d01a4adcf7b5aacd92a5ce1375cb596bb59f0d9c12592372a830844e9a414 | exe | Heodo |