URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	mayphiendich.net
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-08-14 18:38:03 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	12

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	SBL	ASN	Country	Active?
2025-09-17 21:49:28	188.114.96.3	Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-09-17 21:49:28	188.114.97.3	Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-04-27 13:24:36	104.21.112.1	Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 13:24:36	104.21.16.1	Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 13:24:36	104.21.32.1	Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 13:24:36	104.21.48.1	Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 13:24:36	104.21.64.1	Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 13:24:36	104.21.80.1	SBL681411	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 13:24:36	104.21.96.1	Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-08-14 18:38:05	104.18.48.51	Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-19 17:50:29	http://mayphiendich.net/content2/swift/gn3a4bcu...	Offline	doc emotet epoch2 heodo	spamhaus
2020-08-17 13:43:04	http://mayphiendich.net/content2/2s9c8csv-kt-397/	Offline	doc emotet epoch3 heodo	Cryptolaemus1
2020-08-14 18:38:05	http://mayphiendich.net/content2/KIJAKJCE/	Offline	doc emotet epoch2 heodo	spamhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-08-19 20:46:45	1b110485a730140a1499cfb4e0313b280748117cd1f41699438e6e103af73ea7	doc	Heodo
2020-08-19 20:26:54	c3f0d0d594a74f097907231612a0cd0da8c75160a2ae1064a3744ecdea407986	doc	Heodo
2020-08-19 20:08:53	7feab4f1f35adcc7433afdbf4448e5b79996fbe150dfe6e0f708a6c13ce86f7b	doc	Heodo
2020-08-19 19:50:07	7f3f68fc29feddc0494e2e4853b7454b5d0cceeabe5e0bcd13029c5ec301e9c6	doc	Heodo
2020-08-19 19:33:12	a882484dd319c7363eab50da170eaf45d0be854d4208c86d3d9fa00621f2f9d9	doc	Heodo
2020-08-19 19:15:53	529390562b286d3c2cfdfec7f930327818909b300cf64609a2d6d8bb3e5d47eb	doc	Heodo
2020-08-19 18:59:51	90499b6cd235fd63115a4d18f0989f842252935038f4cadec17f85a2081b1cfd	doc	Heodo
2020-08-19 18:44:34	863115404bb5f48e7f22e292813820254117f2cac7a97b266e8a8fd6359557dd	doc	Heodo
2020-08-19 18:31:07	0d9522e1c5d18866b466aa9d28546adc56ea56f6d821fdda5ab77b1285b9e0d8	doc	Heodo
2020-08-19 18:12:54	ed6f742fc6e103f092e9fd9301bf4ec786e88abca3ec1593661c4083f398616d	doc	Heodo
2020-08-19 17:58:16	76b5b8d527359fb1183fc7e4e4eb0dc5369aa0126843b1ec8d04f73c658e0b15	doc	Heodo
2020-08-19 17:50:29	13b1f46a749e4cc9b3bf917bb29bac23d8c73b5fd97982cc625304ca1ed50edf	doc	Heodo
2020-08-17 13:43:04	842a834658cc420c29826536fe1052d47ea8c0e97b7bd446a9c01d42c72b829c	doc	Heodo
2020-08-14 19:02:46	70feb9efa08111fe7c484ceb84655548d7cb35980e388a8832207a68bc29fc58	doc	Heodo
2020-08-14 18:38:04	5fbb1b625fb161c5bcb9aba7324b1b6db7f8a2560550bf4003f0812455bd4ba5	doc	Heodo