URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	mycloudns.co.uk
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-05-25 00:24:19 UTC
Total malware sites :	1
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-01-29 00:11:00	81.19.215.173	173.215.19.81.baremetal.zare.com	Not listed	AS25369 BANDWIDTH-AS	GB	no
2019-11-09 09:26:40	51.77.227.196	ip196.ip-51-77-227.eu	Not listed	AS16276 OVH	GB	no
2019-09-26 07:06:31	94.76.251.91	mail.bredax.com	Not listed	AS29550 SIMPLYTRANSIT	GB	no
2019-08-06 07:08:12	94.76.251.97	server.latabaccheria.net	Not listed	AS29550 SIMPLYTRANSIT	GB	no
2019-06-28 13:43:13	31.132.3.30	no.rdns.ukservers.com	Not listed	AS42831 UKSERVERS-AS	GB	no
2019-05-25 00:24:22	81.19.215.91	hml01.cityzareso.info	Not listed	AS25369 BANDWIDTH-AS	GB	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-05-25 00:24:22	http://mycloudns.co.uk/mycloudns/INF/2j4jlpjl9p...	Offline	doc emotet epoch2 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2019-05-29 20:50:28	7eaaf8ce0632c9ad4fe9acb2b4a97da59085ee7ef6c842b13f7d35084b6b9036	doc		Heodo
2019-05-25 00:24:22	e951c3db59142c02ebeefc5506d08626bb57dfde2b846c9afd21ce31bc2cbe8e	doc		Heodo