URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	phatthalung.drr.go.th
Domain registrar:	n/a
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-02 22:43:15 UTC
Total malware sites :	10
Online malware sites :	0 (0%)
Offline Malware sites :	10 (100%)
A record(s) observed :	9

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	SBL	ASN	Country	Active?
2025-04-27 09:52:08	87.124.92.203	Not listed	AS132280 SYMPHONY-AP-TH	TH	yes
2023-05-23 06:39:28	104.18.2.69	Not listed	AS13335 CLOUDFLARENET	n/a	no
2023-05-23 06:39:23	104.18.3.69	Not listed	AS13335 CLOUDFLARENET	n/a	no
2023-03-16 13:48:01	119.13.30.211	Not listed	AS38794 UIH-BBB-AS-AP	TH	no
2022-11-14 20:21:07	104.18.8.74	Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-11-14 20:21:07	104.18.9.74	Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-05-03 11:26:17	104.18.38.59	Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-05-03 11:26:17	172.64.149.197	Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-12-02 22:43:21	161.82.200.19	Not listed	AS132280 SYMPHONY-AP-TH	TH	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-20 22:24:21	http://phatthalung.drr.go.th/content/xunVAR8iTH...	Offline	emotet epoch4 redir-doc xls	Cryptolaemus1
2022-01-20 22:24:06	http://phatthalung.drr.go.th/content/xunVAR8iTH...	Offline	doc emotet epoch4 heodo SilentBuilder	Cryptolaemus1
2022-01-17 21:46:16	http://phatthalung.drr.go.th/content/YBG_98151568/	Offline	emotet epoch4 redir-doc xls	waga_tw
2022-01-17 21:46:06	http://phatthalung.drr.go.th/content/YBG_981515...	Offline	doc emotet epoch4 heodo SilentBuilder	Cryptolaemus1
2022-01-12 04:57:04	http://phatthalung.drr.go.th/content/S_2996643/...	Offline	emotet epoch5 redir-doc	Cryptolaemus1
2022-01-12 04:51:06	http://phatthalung.drr.go.th/content/S_2996643/	Offline	emotet epoch5 redir-doc	Cryptolaemus1
2022-01-12 04:51:06	http://phatthalung.drr.go.th/content/S_2996643/...	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2021-12-24 12:13:10	http://phatthalung.drr.go.th/content/er4Pc3CBi/	Offline	emotet epoch4 redir-doc xls	sugimu_sec
2021-12-08 23:02:05	http://phatthalung.drr.go.th/content/33MXYWSbAg...	Offline	doc emotet epoch4 heodo	Cryptolaemus1
2021-12-02 22:43:21	http://phatthalung.drr.go.th/content/km2em799xx...	Offline	dll emotet epoch4 heodo	waga_tw

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2022-01-21 07:18:46	6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5	xls	Heodo
2022-01-21 07:02:54	b443a467b699497e7eabc0c3bdf7bf6a86705a29944ec4ee8e249abb7d17828f	xls	Heodo
2022-01-21 06:53:00	5733b0f4ff735d3282e9f35d49f2415eb5b786859209d98bdfeb412b55d09958	xls	Heodo
2022-01-21 06:37:52	b11d267860a7dfa12d415540e8d6b6e4b7813b2a4d633c966ce2c405a20b9a95	xls	Heodo
2022-01-21 06:24:55	245057c2c16d698dc5399ecd43ca39f9e0b35885a19cc42cd2650eb8e17d0c00	xls	Heodo
2022-01-21 06:11:07	ce8ed57f03c2c3733b81f29e38332753051c9d5917d62760190dbc6b9dcebf45	xls	SilentBuilder
2022-01-21 05:41:12	08e9cfb42b052e00b6236416ac76a10be4787f0ec137401a92bce8fed5f84d48	xls	Heodo
2022-01-21 05:25:14	17fd6dde30c8df304a856b8907a053772fe7300d8ca7f8164b72d0c5f5f51215	xls	Heodo
2022-01-21 05:17:51	7ecf0d5b556f400f2d98ef9f7e90373854ec0bda7732f5300223f9c600405235	xls	Heodo
2022-01-21 04:50:38	db8baab6295830de9d3d9a59dc3b8c88a5de601deeaffaaa83bb6aa941e29b6c	xls	Heodo
2022-01-21 04:45:40	68ac40fe87dde757e87dd5e24f31fa32b8936e445748bf112e3b2bfd8e50c713	xls	Heodo
2022-01-21 04:19:18	dac57112411305935ad4318c4ff4f495b8b39f84f001b64d83ea3ae69a994b02	xls	Heodo
2022-01-21 04:12:59	76b99443173be2dec302236f022b468a8f7314de6c460df50dfa9459fed95ba5	xls	Heodo
2022-01-21 03:50:09	aaec559a9461b2ceb6da5a557186641e67370e83fddc9b23237f6f92c0e22fc3	xls	SilentBuilder
2022-01-21 03:41:15	0dac6c23f1feaae5aa06f2ca15b939bde3b0392babe7cb38b91abc4112c0fea8	xls	Heodo
2022-01-21 03:21:43	f8d6b99d4c2313eca81f477de5763048a8606e5e06adf6e6cd4dc0675f8b891d	xls	Heodo
2022-01-21 02:57:50	5ceff31125b1d5b68a48d4ce817ba3b487201c0c24e2efe3ad2e14400edccd42	xls	Heodo
2022-01-21 02:46:18	4f0d506bde4b58d49d13c50470ec44e3cb2d9b084afa1186e857445ea66faccf	xls	Heodo
2022-01-21 02:27:54	82dd39849f520450c56ac21901abda18f16d08294e0c9569e659ed9133781c7c	xls	SilentBuilder
2022-01-21 02:12:56	d209f6f33da26aefbc9f93e2bb3379d164efbc34f6ed2f38b4c8f19024098971	xls	Heodo
2022-01-21 01:51:29	5d8d1d8cee7bfa315d6091608aaad9d7d72ffe649d9dd9d4583369298b45160c	xls	Heodo
2022-01-21 01:47:46	176e74f0a464fb21b84f6934aad4baec2610d29e8998c2d8808c45affe7997dc	xls	SilentBuilder
2022-01-21 01:18:30	17c8e59bb1ddb5280a54987b4ccdf4c98cfb72071d795eb10b5c50b7d32b9d8b	xls	Heodo
2022-01-21 01:00:37	8aa9a577a3bd2b2fb4b35339f5593a8a3f1c7635247b6fe78fbbb2983a8cdd4f	xls	Heodo
2022-01-21 00:45:52	358e8e25ef848f0530a1b2094f471f68415b1b8f84cf21e6f9f1dbb774759140	xls	SilentBuilder
2022-01-21 00:33:37	649143ea8e6ec1173106ac1bc3034951327ffc75a1d8324a1b80d280998e2fa2	xls	Heodo
2022-01-21 00:26:06	71ef7935e65760f4ec2fc7a2d24246ee5db75c28000b0a7303ec8ac0c9e98634	xls	Heodo
2022-01-21 00:03:44	af86124d12773c861ad103419ab9f04ada33b95ff6919a1a9f9c4dfe2d49131f	xls	Heodo
2022-01-20 23:56:23	531278b90b12ac32bc7671c1f2a52ccc15afe992249b5dda28ae98885b954c99	xls	Heodo
2022-01-20 23:24:25	39123bd1932920eca6749593bee628c405f8bb88114d8647a5d9db8b5914f46c	xls	Heodo
2022-01-20 23:07:03	c3782f393e6dca8cbded5a7bbb73789792cd1bf807f4f71cd863b12992beda95	xls	Heodo
2022-01-20 22:43:30	a72795a18fa2b90928f307e227b1f1a57590672870b3acc9e8cb0eb4d38bdbff	xls	Heodo
2022-01-20 22:24:21	8bbe76fa741494b4f7ec140e2185a34b621d0f9af8990c20ab321c156e67e496	html
2022-01-20 22:24:06	8a39d34f5c3133db2f6137b02545e312f05bbdabceda4bd830948380fa4c98c7	xls	Heodo
2022-01-18 06:17:09	59cb2552a34b231acb92fcee121b13d662ca7f0049a70aae86fe312270f548e5	xls	SilentBuilder
2022-01-18 05:59:54	42086786392d71f57268416d14275638e2955c797babcbd5ec21b7eed6703652	xls	Heodo
2022-01-18 05:49:39	b463abec1dfc612e1ea59fa20ed07f468fbdc69e8694a5af639fa79435ce4f58	xls	Heodo
2022-01-18 05:40:04	35be5819e56e15ca1bc78bb61ba08a38d392461405142da722d534c2f87e55f5	xls	Heodo
2022-01-18 05:14:28	26b4ee804e6a317a802f1c370398c6629f516477378bf94cad94413237e05c34	xls	SilentBuilder
2022-01-18 05:11:19	ef7820c85bc6c3df2447132bbed914ed101aeb7baf6e6edf25026375f9df3980	xls	Heodo
2022-01-18 04:54:18	96fb18491f6cf868e63171c4ba461b95b4b74d39b1ce4ea5e4e96373f97dde26	xls	Heodo
2022-01-18 04:31:40	ebe7c1008e98277cac317211c9fb8db1371f256f9c344209fba11039fcfc1576	xls	SilentBuilder
2022-01-18 04:13:18	c1a761edd3badd0226e48b8622372de2feddd9d4ced41445685022600816aa7c	xls	Heodo
2022-01-18 04:08:05	f992f21f03b86aefe34db46f747ad9c063feebaac70cc1eff8cb76806aed499d	xls	SilentBuilder
2022-01-18 03:57:13	0971b78a1fa100002ec0c3cd1d18af109e56369c4a52b4445f10c30ea8ade7fc	xls	SilentBuilder
2022-01-18 03:29:48	30ec22e5f956439cc697c71a92a8f806335253f5b692b8375cb4acad148b5cd2	xls	Heodo
2022-01-18 03:12:27	4ad545641ce10800bcd2a75f03ae32b78d9fce1feb504c5353da50438959e3b0	xls	SilentBuilder
2022-01-18 02:53:33	14e06e9395a20e63635c321d4e8f23e03da439bfd81766dab0a621ec1c4627ae	xls	SilentBuilder
2022-01-18 02:40:31	909cae6e044629c7d0356bc96ced029549d3a1572031da350ee6b96489664f31	xls	SilentBuilder
2022-01-18 02:25:01	bc1172240f277c311e80e1e9149ebab58d1870bc0a9e94f3bd898a025495be3e	xls	SilentBuilder
2022-01-18 02:14:56	e07cb07d8a2b296d0f506a805e5721233820e0f8d4c9d552940f71fca7be7a8c	xls	SilentBuilder
2022-01-18 02:06:55	78edafc9ef5c586ac250ab33c4670eb0777e862160498429f24acbb551b6f3e4	xls	Heodo
2022-01-18 01:49:44	eb7193559a0f423ea0f4c9d50884ff6e053a6cd4b1a81563ac619e72595779ec	xls	SilentBuilder
2022-01-18 01:34:47	cce8350caeca1753a8904e4cbaaf763ceb8eac0445b3235b74a9635727d39118	xls	SilentBuilder
2022-01-18 01:21:32	027a72970eec77e5214269c8f79a87f5f614a1ecee11257b3feac2fbf54740f2	xls	SilentBuilder
2022-01-18 01:00:23	ba5cec050921142c70a9666d32ed2689badaae0afbf6105f2c3a570638634d84	xls	SilentBuilder
2022-01-18 00:52:21	5255b0788b382c41d46027fda6dc4e3c717a4cbc46469614299d184bf77037df	xls	SilentBuilder
2022-01-18 00:29:27	321d80f76297387803acdb4fd4e6a4dc6073d515955445752390767e95884b67	xls	SilentBuilder
2022-01-18 00:12:52	b933c6fc1ce4b9df0d65fae6724a3053c183cbdf921053873252181bf50ed7a0	xls	SilentBuilder
2022-01-18 00:02:13	6d894e2cd1eaad5f13a55f94de79b6dc01a1f37c48b884d488e46003c054eb8b	xls	Heodo
2022-01-17 23:48:55	6c42a94654de5ebe226d285c0ad13e26b01ba97ec5f8faf8e2fb9411a2fc1380	xls	Heodo
2022-01-17 23:33:02	d90276f1e57f91966cccef797f36ba18dfdc19cf92a4505d0f59f2421f4eb2ba	xls	SilentBuilder
2022-01-17 23:16:27	6c45d08768b929c1e9e51c06e8e11e0f679c9a66a33415a427417ee1a3391ee0	xls	Heodo
2022-01-17 22:55:52	63ca712aa3ded137254262b9946785369c094b3e58b186e4ddaf34ba8b5d9e85	xls	Heodo
2022-01-17 22:35:29	f6c6e2de6c48ffc623320a3b19ef24f8dc009d55b9d388b58847ef5008962cc3	xls	SilentBuilder
2022-01-17 22:14:32	9d3854a143ef21ea2f229b04928a70a0bb2f546162e2eae563243d867e00d1ce	xls	SilentBuilder
2022-01-17 22:01:36	8ec79669414afa81c586c25f9508a0e51e77a474b567e19fbc426d33f324d1ed	xls	SilentBuilder
2022-01-17 21:46:15	f8ddf1c3300bbe287a4fa64bb69416ec870957dbe8dc770bac335b7c15523735	html
2022-01-17 21:46:06	8976395bbc9ade87e7ecaf509860c9a460299dba5418b0c536818a7d14d5941f	xls	SilentBuilder
2022-01-13 04:49:55	32d200a99b9495fe0dfcab75190eb5fcb348e6fa879763d132c924fe25bfc799	xlsm	Heodo
2022-01-13 04:38:24	ae8e1d5678b54ef2ddb35fcf1233370916f4e2355f1aeb9066b9f7e12d07bcac	xlsm	Heodo
2022-01-13 04:18:10	cffc89330574a0b7d5096c64bff0483e4dbc38d09be06dd3fd4cafca0a4e99ed	xlsm	Heodo
2022-01-13 03:55:22	869b3e37539d37f91353d70a91951ea1da88ee298ed6992b06315984bfb23247	xlsm	Heodo
2022-01-13 03:20:15	69af6706b85f8b7530add4d0277acf97e3f30aa8240e27adf3c97ba52581e86c	xlsm	Heodo
2022-01-13 03:05:32	0f3edf4e46a263ca74e1089aaebc8b85db3e80677f8f4606e5f9a09fecec3903	xlsm	Heodo
2022-01-13 02:53:38	4e334f1e7d8c85ec0ef565959898a1ddbe225377df8590e806143832bc768320	xlsm	Heodo
2022-01-13 02:46:58	ee49f3ff07ef559fa5be77fbc12091b27970f3ea8dc8b8aa46bab089adb8213e	xlsm	Heodo
2022-01-13 02:32:07	ad80a159607095ce60f84198a537f9ed0bc3b5205b2a84a49c8173d53d942e60	xlsm	Heodo
2022-01-13 01:50:31	18b6cbb0d07ff485318c932b7c8704153e563545e4741e5dfa42229519287263	xlsm	Heodo
2022-01-13 01:27:26	e479adbf5f0acc27094c482523f9ae3ad97b43f50f4df328d126ab9e98f0bbf0	xlsm	Heodo
2022-01-13 01:00:53	00714061c46c2698b29d0f88c92096cc433a3b26acac70825717dde40e0ff407	xlsm	Heodo
2022-01-13 00:27:29	e19c4cdeb5c2e9417e8976342dcf2494d337be7e4f6be1f465e9eacf998a6d5d	xlsm	Heodo
2022-01-13 00:02:36	38e984900acb5a6830c8ea2b34c0b1b85c45b32848da185c5bd3e2546ade2311	xlsm	Heodo
2022-01-12 23:48:09	20039ff121b47e5026b29877b299b76e47f3c7f766b9010a04e148a19823dbb6	xlsm	Heodo
2022-01-12 23:25:08	e62d334e565115ed95712c266991de6e26054d57b5c019a4ef2c0382377c93f9	xlsm	Heodo
2022-01-12 23:09:19	60610dee4927e907b5a6a4ac49f8c921fa8af7005b2e8deb2b26ffcc1cac6322	xlsm	Heodo
2022-01-12 22:38:48	9f0a7342511328df49b73e718bb20dd3db1437cb3d115548f9d6a0cfda3af0d3	xlsm	Heodo
2022-01-12 22:20:39	135ace077486200deffc6797336cc464b62f91268eef6e6cee687a8c6d792053	xlsm	Heodo
2022-01-12 22:03:09	292826fa66737d718d0d23f5842dc88e05c8ba5ade7e51212dded85137631b31	xlsm	Heodo
2022-01-12 21:34:56	55f48cc2648e4a62227a97fdb538ed074610e8d08ff5aea6170d3ff3012aa623	xlsm	Heodo
2022-01-12 21:09:53	94e647e716236a47da9833f6f96af2d79266610de675e984b8d1fa92c6b66d12	xlsm	Heodo
2022-01-12 20:45:31	64d99b928974aebaf398137d54b64011c61752365aea111625000865835581e8	xlsm	Heodo
2022-01-12 20:32:40	1bda0395914226e0e8595d97bf7970dbd6f029b30d8abf2d887cec6ed7084cf8	xlsm	Heodo
2022-01-12 20:01:10	9b6c2d3a2e0010b47a9e3f6a391bb288234c1edad441716ec99b1188a5ae2915	xlsm	Heodo
2022-01-12 19:48:32	f92091f4bf9b99100b516a015bbcee3bb1107b3f1084307aefb368863e3ef9cd	xlsm
2022-01-12 19:30:12	a1d6ccc8d4baeb930c4466081955434ffc07b1ad4105058d4b3cafefe0d50098	xlsm
2022-01-12 19:14:44	d2081a087e12bbda13228bf6473570e76d0776157f719f7814f825018db9ea7c	xlsm	Heodo
2022-01-12 18:49:35	e39304e5761525a2038957233d6586c769837ac3c5a02b742e2fba6fb84b061b	xlsm	Heodo
2022-01-12 18:36:51	d71345f2aba73f7209585626467e21128fb342e43c8a64c475e1c9d8a052527f	xlsm
2022-01-12 18:04:33	ac1a9c4299618d4a3024d88f644e7ff3813627c6b91a5be1b6ea64c037ec7c99	xlsm	Heodo