URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-06-01 21:36:51 | 46.183.139.227 | web27.gigahost.dk | Not listed | AS47292 SENTIA | DK | yes |
| 2020-08-06 19:44:08 | 217.116.232.227 | Not listed | AS47292 SENTIA | DK | no | |
| 2020-08-06 21:29:07 | 217.116.232.205 | web5.gigahost.dk | Not listed | AS47292 SENTIA | DK | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-08-06 19:44:08 | http://peterfaber.dk/loggers/FZIR0dI0_nDjsIVSdS... | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-08-06 21:29:07 | 2a607a1fc7f2c597d58569e63a25982ac1b9faf8a197a007e10ef3201e129706 | doc | Heodo | |
| 2020-08-06 19:57:54 | 70600ea20b1ce00f93af9afd801ce0915972b4102901b00d37b8f9a7f782a036 | doc | Heodo | |
| 2020-08-06 19:44:08 | 2307c46127ac3ccf7bbcc05676da2b8fa2220fdbdc37fc24bfdca7c2414fa815 | doc | Heodo |
DK