URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: networkmonitorsoftware.net
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-10-21 07:52:08 UTC
Total malware sites :1
A record(s) observed :5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-06-22 21:59:10 104.143.9.110Not listedAS399522 TP- USno
2025-06-22 21:59:10 104.143.9.111Not listedAS399522 TP- USno
2025-04-27 19:11:59 72.52.179.174lb01.parklogic.comNot listedAS32244 LIQUIDWEB- USno
2020-10-23 01:04:23 8.9.5.448.9.5.44.vultrusercontent.comNot listedAS3356 LEVEL3- USno
2020-10-21 07:52:09 144.202.53.17144.202.53.17.vultrusercontent.comNot listedAS20473 AS-VULTR- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-10-21 07:52:09http://networkmonitorsoftware.net/wp-content/pa...Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-10-21 07:52:09ed628dca8ed590c827cf2e732b0b1555821315553d3f1bb38da11b8cd2da7ca2docHeodo