URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	mewb.org
Domain registrar:	GoDaddy
Domain registration date:	2020-08-05 08:44:22 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-01 02:31:11 UTC
Total malware sites :	8
Online malware sites :	0 (0%)
Offline Malware sites :	8 (100%)
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-07-09 16:38:23	15.185.47.115	ec2-15-185-47-115.me-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	BH	yes
2025-04-27 11:56:13	16.24.13.221	ec2-16-24-13-221.me-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	BH	no
2022-05-07 12:55:25	162.215.9.161	5850135.mewb.host	Not listed	AS46606 UNIFIEDLAYER-AS-1	US	no
2021-12-05 22:04:23	134.122.77.19		Not listed	AS14061 DIGITALOCEAN-ASN	DE	no
2021-12-01 02:31:12	46.101.108.157		Not listed	AS14061 DIGITALOCEAN-ASN	DE	no
2022-05-21 07:56:02	209.99.40.222	209-99-40-222.fwd.datafoundry.com	Not listed	AS23005 SWITCH-LTD	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-14 09:33:04	https://mewb.org/wp-admin/75083323/	Offline	emotet epoch5 redir-doc xls	sugimu_sec
2022-01-14 09:33:04	https://mewb.org/wp-admin/75083323/?i=1	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2022-01-12 14:01:04	https://mewb.org/wp-admin/2fcpQyzanzkiO1/	Offline	emotet epoch5 exe heodo	Cryptolaemus1
2021-12-09 00:42:09	https://mewb.org/wp-content/P7tzclcF/	Offline	emotet epoch4 redir-doc	sugimu_sec
2021-12-04 04:10:10	http://mewb.org/wp-content/EldiU34Mwx1U4Eqp8BmL...	Offline	doc emotet epoch4 heodo	waga_tw
2021-12-01 09:51:08	http://mewb.org/wp-content/vQu/	Offline	emotet epoch4 redir-appinstaller	sugimu_sec
2021-12-01 07:29:11	http://mewb.org/wp-content/jYKcGgZxG/	Offline	emotet epoch4 redir-appinstaller	sugimu_sec
2021-12-01 02:31:12	http://mewb.org/wp-content/jYKcGgZxG	Offline	emotet epoch4 redir-appinstaller	waga_tw

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2022-01-15 09:37:41	460f8a1daadf1518b1f27f19ce641ba92a1ae23c0452656a068e5f46bce16623	xlsm	Heodo
2022-01-15 09:24:55	9a31fc23a27bd0e049c2fa04ef0d1f830f4183b026889fcdbea3969a2d9e4092	xlsm	Heodo
2022-01-15 09:01:20	7036b5af3647086ffe5272a4c48851f215d2faf6205b73c402acdc8f1629e8d3	xlsm	Heodo
2022-01-15 08:42:15	3eb7ff0ef35d108a0719b6beea7306c849157fc6b8ef972d9d1f4b24696f71c8	xlsm	Heodo
2022-01-15 08:22:17	62ee016f8e7b7c66a4b5ce151a267bb09faf53130401252a9f11a024c14f6e13	xlsm	Heodo
2022-01-15 08:05:31	c8ae806c1fad8007f17331fc0ea71d000140443e4596a430f7cd80332ac3c2cb	xlsm	Heodo
2022-01-15 07:40:14	cbabf31062db7ba965fddcf8a0309fd8f045f20c5fd0baf6d086f52878f0ed03	xlsm	Heodo
2022-01-15 07:27:08	08ef4baae29ca114c9334c50c92710b30d715dc5b7d81a609a33658cac08f98b	xlsm	Heodo
2022-01-15 07:07:30	af74adf2376ab0a8fb16735d44fc3e72bc4480a91b2cf9de85cd2f9ab7fe1fb5	xlsm	Heodo
2022-01-15 06:47:36	55609e9411de2aa6dca0995747f89cc0b89081e6722e497433da8f8d02e9a2f2	xlsm	Heodo
2022-01-15 06:26:35	c909891cc6ab3148cc2e5af0f42b18f4fea635079447729eba2203ffdbdf32d4	xlsm	Heodo
2022-01-15 06:22:26	0c68a7f1d74f3e00c0566eece5ce5825b0d3698dc7f108664e3d9892954062b7	xlsm	Heodo
2022-01-15 06:06:39	7048b590b47e71cb6a20b35c192d264bc4bb1fb4213dbb9a9a2c9748d53af762	xlsm	Heodo
2022-01-15 05:39:24	2966763dc88ba44de5f3aa8ff82addad4bb4b567bdfe60a067f169098258c418	xlsm	Heodo
2022-01-15 05:13:10	20f452bb488539a7e3a4840a8ed88bff9a700b89e50439e71b40181a71ee604d	xlsm	Heodo
2022-01-15 04:59:06	7a75b8d2c5567ef0c4fc7270b77c7deab2f2a81ea2f1b969f66d680a781b5065	xlsm	Heodo
2022-01-15 04:46:21	0400c5d7c8ad85387bca95f3beb4be0b192f8a53aaf64f60e631ac66c60b5504	xlsm	Heodo
2022-01-15 04:25:11	5225cb80d26dfdd86adfb738e4bd1db0465b96e113af141c8cbd9d0bf4dc1e45	xlsm	Heodo
2022-01-15 03:58:25	db676ef714ea818edca3ff4a25da38808cbec2a6d7b944a237e44ad29d8932da	xlsm	Heodo
2022-01-15 03:54:44	27e87e375006f747c439d7ee9faf69843cc289ff75a5eb062abbea47c57efcac	xlsm	Heodo
2022-01-15 03:30:20	771e8eb9454d09d3f655f55713b1791583aaa6f813d896737b38d1da511fcb15	xlsm	Heodo
2022-01-15 03:07:22	5d0cc537deee02adfdfc8d27167144f5c222745162c15df34803e67f09cd7f1f	xlsm	Heodo
2022-01-15 02:51:30	77ffacc52c59a0eb5b6b3714889a43cc959b49088f530582dc6481df50f843f1	xlsm	Heodo
2022-01-15 02:39:24	ac7bc114197f00db5cdc8220478ccee911aaa8a17481da2be5bd05e884c00b2a	xlsm	Heodo
2022-01-15 02:19:45	d23b6087f9c63fee7bf5d8e620cf88ca2c38fe8ee342deed923d705fa9b6d68c	xlsm	Heodo
2022-01-15 02:00:25	35101e24e0d9b97edc46d35011a21e505ee4b05036998544ad3dad3444e09376	xlsm	Heodo
2022-01-15 01:39:50	b654e1b1f4906be1e6155ad03eba53894dfa66ba899732c7f4cacac7a98d1f6e	xlsm	Heodo
2022-01-15 01:24:15	de54a7c99135db230ba151e513f7813ccca74b08201d7592958e82c51b152386	xlsm	Heodo
2022-01-15 01:20:49	b5d5cd9f663587f2151ec927231d7058d317666224b71c201bf5db90658c12ac	xlsm	Heodo
2022-01-15 01:00:58	c20613da92dc6c60ccdd38a6c41f069e973921e2e618c3e9b673480e0fdbe172	xlsm	Heodo
2022-01-15 00:44:27	f58905138f947e83a11dabe1d0fcacd0f6b6390a4b2c968f6de1e7f388ff5f1e	xlsm	Heodo
2022-01-15 00:22:51	df3d1c9f634b214294ffb42adacb58b20d8aa9f35da387af12be4ef35556a1ea	xlsm	Heodo
2022-01-14 23:57:35	8f0f2077aa3edcc93ab9afc1a8e9b37a8e2188bd636656b06daedf8135750b73	xlsm	Heodo
2022-01-14 23:30:00	c7f2afe51337a22d7458aad225f6c867436b3c51c0897ddd6815294d8731353a	xlsm	Heodo
2022-01-14 23:17:35	23d904c32148793e80d050809ec6989aa4733e705e1aa03df256c3fa6ae218cf	xlsm	Heodo
2022-01-14 23:05:18	2a5d979303bbfb1841259d7d749dfbd18ede67591c12a1bf6226ee347e5987a7	xlsm	Heodo
2022-01-14 22:38:55	cf04f9d9d12315b27f3fc16c12ca6860a84b391e604598b91b704eaabcca52d7	xlsm	Heodo
2022-01-14 22:30:28	46b8a68b043ea9ede033a603ef771e24c4e2255070731c00b909c41607b2bdf3	xlsm	Heodo
2022-01-14 22:10:01	1f9d9fca72abbfae3dc8f70790c4d8ee3916adc5c68ab73c3d2cdd1fa38198b4	xlsm	Heodo
2022-01-14 21:35:21	a51724da5a2c220ccb551df3d43ba4004b8231ff7848bc4058daf8477c56f75e	xlsm	Heodo
2022-01-14 21:25:51	2819520aee64e6800af25eca5fa2aa0bc926fc6dd13200b425c0a686d95db027	xlsm	Heodo
2022-01-14 21:08:28	013f28c036fa5af595b6c61d98cb6dc88cb8045194ef50facb59d481041c23cd	xlsm	Heodo
2022-01-14 20:40:42	21279987ba4135e6afcbc5527f9c26b7d4e3aec26aa1e1863d2e144edd7f7730	xlsm	Heodo
2022-01-14 20:28:19	d88d83fc565c556b4332a98efdf1c1eb765b0526e632d40c50f8f0bc75d30857	xlsm	Heodo
2022-01-14 20:13:35	a5a72434f5357b664856b5ce941ab93a74e2a5e9765cd65139c74b8d0c6c999c	xlsm	Heodo
2022-01-14 19:44:28	87a33eb014251fbd3e80d9dce2bf789e0c1b579d59554f4efbdd3f6d78a6e57f	xlsm	Heodo
2022-01-14 19:27:57	21961b0d16c7d2561ef0c3d8a055eee86e90688f4a6fbe27c7f64c61096d0aec	xlsm	Heodo
2022-01-14 19:17:21	c822efa6c4fed299c0bd7794b8f9a4e193703f2d22f78a795dbebc4748dbd4b1	xlsm
2022-01-14 19:00:21	01e7bf755c02b2a01e54ba0c464ce80a6e64a404a541e9fd46ac00fd1d3b22f2	xlsm	Heodo
2022-01-14 18:41:24	4fca1c54e08fdaa16e2a0697f33e798e9dcacde746cc035fe595bdbf1822b2f1	xlsm	Heodo
2022-01-14 18:30:45	5d096704a430b052afbdbc31e3ab50be22354e158b327750c24aad5193cbc305	xlsm
2022-01-14 18:17:37	89be0892e2374d1d0423930f73ad31cda4da82ee29970a5fef0a996357609051	xlsm	Heodo
2022-01-14 18:01:25	0d689f583f780d0dbd3e9197bac7b961ad20c2a5d4e0df322ec0308f43eac999	xlsm	Heodo
2022-01-14 17:46:11	8af80399bba56ded76bb3e7373388d1354841bbea61dfab0094215403def66c0	xlsm	Heodo
2022-01-14 17:26:56	76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93	xlsm
2022-01-14 17:09:03	91b698296f9258f576362d0b0eb4449692d940a43cc0a15da04204736ee3d17c	xlsm	Heodo
2022-01-14 16:54:26	69c12e112b530ad17135d9bfde2781898ee661501702c81ba5c27903d439623b	xlsm	Heodo
2022-01-14 16:36:42	2b25518c74a4620e944ebbb70b30787175d702d7c2b9dab5072d25bda750f042	xlsm	Heodo
2022-01-14 16:08:44	30998e271a430bad7397afef57404301030b49c3fc434ace1db143a0ee8252e1	xlsm	Heodo
2022-01-14 15:46:06	9ee1680a43e5c1dc04ba4bde66dd54c7703bb4d94b8be7a1e65c41ffc7e2809c	xlsm
2022-01-14 15:38:32	1c68f30f7393f7ed3b31069e559a5247a7b2dca41c214fcf30a88a67f89f5d21	xlsm
2022-01-14 15:11:35	dfde0acf3284d504559d7ba1a52f478ec7e78a6a34cc8626f3bb5eced2d456b1	xlsm
2022-01-14 14:55:55	c51b53b80e46faa2609fc03aa38720a82a939a25e4999abdd30b94a915ddc24c	xlsm	Heodo
2022-01-14 14:37:29	a071e68277a7133cb48b04e16b3df8081238c690317747153fc4c48d7f508952	xlsm
2022-01-14 14:12:15	1d5a664f5ee71027f50ea0456755bd1285f2d04b4bbfbdb59389b49e9aa3f06d	xlsm
2022-01-14 14:04:00	4798497313ab844457b411ab2b7dd381ff709e35009c92e6adf769777919b08e	xlsm	Heodo
2022-01-14 13:40:39	b8eeb9ce689d47606555621bc19a8656cf207de45ba62134e9c55c962a344dc6	xlsm
2022-01-14 13:18:50	d5410b70cb30784d5cb00821826ddbbcb7aebec8f3cef9658c6dca679e86aff0	xlsm
2022-01-14 12:45:48	6adebb1f908d95b0e98266710b732c600ff552131a6844031fc5417ea84615b9	xlsm	Heodo
2022-01-14 12:41:36	38fae338f6c68c5cf6e80768b44a9286d484b36262b24c1766f66e76de463aaf	xlsm	Heodo
2022-01-14 12:13:54	91d755374725859f64dc3160258cc1f6a2f04cb768b0da56e86e04511d57aca7	xlsm	Heodo
2022-01-14 11:53:28	daf92a74582de89dee72174738e3196b3e9246a624735a3ab312f4ffe7ef1855	xlsm
2022-01-14 11:39:11	684179a59ccb9a4240a2cb91d8dcc96b15c6aa79eb8a928080a253684d3c2b2c	xlsm	Heodo
2022-01-14 11:03:56	f36635fc524dee008c90bd6556c998119d281be4995e4a5fd140a69fbbfea36d	xlsm	Heodo
2022-01-14 10:59:03	1c297a6ab065acb1152f13e630509d68b98eedaca18dd4ab43062f8f95ea9a16	xlsm	Heodo
2022-01-14 10:35:44	1c183538db4d2feaec54995ab30b00d70fa772995b7afd8203198db1816e0664	xlsm
2022-01-14 10:16:39	ccaa6507919076a28b38c5b5e30d2091705e482d54aedc76bec5163d31e21fe1	xlsm	Heodo
2022-01-14 09:46:30	c10d40fd29ee12ca187becbe26e5d7f132695ffca909bf6013247c9146b71b81	xlsm
2022-01-14 09:33:04	4c6901fd2b4bba39e5d757b0c4a042c34d9880ee297598a1772037288fed2a70	xlsm	Heodo
2022-01-14 09:33:04	85ba7556169c975eec4757244b1f75abd11bff594e94f51ecd2f5fff6bbff6e6	html
2022-01-13 13:19:48	2cb9376d8fb1b74e8e6e3ce58a90cc3e53c1e6f03e3a3e78bd5b6c3a1849f4db	dll	Heodo
2022-01-13 12:50:45	9b9f99359c303910d00dd4e1b990beaefa7511b8ea2d598e8cd38b9afb822d6b	dll	Heodo
2022-01-13 12:27:04	2416aaa995ac2916488fd0bf494642ddd0ec30a03b78436c9468a5b35d46bf5f	dll	Heodo
2022-01-13 12:12:18	a76b78c85612669292cc8588a4e00a7de67b35e3f0122c0bf51506d2cbc39fd9	dll	Heodo
2022-01-13 11:50:45	81da5ec4d97ad98903250518508b1501a8f17621539e75d52b4c7e281230142d	dll	Heodo
2022-01-13 11:19:10	2091c87a67db5f12ff414089aeecd372a82143b0fb49f5ea03d9c017ca6b6086	dll	Heodo
2022-01-13 10:57:40	4b8a0fd2dbc437bbcf5d2aef0f3760fb5eb86e9c782d2d34e37f3efa25b381dc	dll	Heodo
2022-01-13 10:29:18	6e3ad084c3f33f5976740d0058b2ba47e1c5959e4c9b8967eae92b2dfbe0df2a	dll	Heodo
2022-01-13 10:04:09	ab821fc8eb74d6d98428555e4d32d94abd06f2bc6a2ea3a0396b3edacef80dec	dll	Heodo
2022-01-13 09:45:28	044a5a7c6dffd24b81157e9365a8cbf107a04d1904d75b3c4ec3fe7b28ce764d	dll	Heodo
2022-01-13 09:19:41	c0a6ba451cb0be87195606672ab1a5fbf166ee520cda96ff91a16162a8fd4442	dll	Heodo
2022-01-13 08:54:38	ec2eac9b440593273ceb84a44ff27cb185305e71648db6b199a9ac9289b384b4	dll	Heodo
2022-01-13 08:29:37	d2b98c405d440477f08efcf7b22a4fc14518ed9d48170435ea91d7cdd2218d96	dll	Heodo
2022-01-13 08:07:35	a90da5fde961685b3ed0aa3c2609067edde47ca04d40a2559a739655b673266e	dll	Heodo
2022-01-13 07:33:08	525936ef0aec7e5c7550e9db8bafda973efc9841819278a2c9eb4f67b2011d88	dll	Heodo
2022-01-13 07:14:04	561f5f6c18e2ef63515538dcc7529d2496a5a4f5afa867407d2dc8062ac427bc	dll	Heodo
2022-01-13 06:48:34	17e635e9dd4be7666cbb6d5e9dabc2c92afb7746db0a433ed9c42766ec5c9d9b	dll	Heodo
2022-01-13 06:38:30	755d346dcc6b29c6a38e8d054afaddf2647a6e1892c0315f1be9c145912f7d87	dll	Heodo
2022-01-13 06:08:33	01203d4be6ed2d7bd091e5dd776a81ee238aabeb3683f8e52d3d4c606ed94f3a	dll	Heodo
2022-01-13 05:46:56	8ac6398bbf917645d62d5a06c5e88790cd1aa46ffbb5fc666eb87b6a5ecbe0aa	dll	Heodo