URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-07-02 17:45:33 | 38.137.108.6 | Not listed | AS55140 SHO-ME-TECHNOLOGIES | US | yes | |
| 2020-08-17 11:49:15 | 198.1.3.164 | Not listed | AS55140 SHO-ME-TECHNOLOGIES | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-08-17 11:49:15 | http://newburg.k12.mo.us/wordpress/multifunctio... | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-08-17 15:11:19 | 13698824549fe260c90e29eb5e82ad4cbee7584982786b0fd581f8d3d9fd3ccd | doc | Heodo | |
| 2020-08-17 13:44:44 | 0ffc730b768c45ae0f359cbcfad987af88e15ac6e383857a2d42e7be17d01bf7 | doc | Heodo | |
| 2020-08-17 13:15:12 | 80033762f63c113feb8a08a6c06eb29c8d53d857d30f3a85d05cf47c021afd08 | doc | Heodo | |
| 2020-08-17 12:52:50 | 3075e5f4103e8dd642f315d74bf45b8683c6634fd3bf5958bc5225f745dba25c | doc | Heodo | |
| 2020-08-17 12:46:53 | dd90e23dd04ffd1b25a1f18be7b336ee6480e86a8b8d187185828c99f7850167 | doc | Heodo | |
| 2020-08-17 12:30:32 | bd7da471737e6929c32e4241266df6009460e4cfa82bcbf8e042ea1822a6753e | doc | Heodo | |
| 2020-08-17 12:11:58 | 5dbe478ffc810f6483b188ff86828412b661f3d7e9ae71a84c549694af142547 | doc | Heodo | |
| 2020-08-17 11:49:14 | 2116d668fe951d0c6416856abaecd566f9ee3e52d4a9cf85fadce76aa234aed4 | doc | Heodo |
US