URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 12:34:41	62.129.209.7	ampe.pl	Not listed	AS12824 HOMEPL-AS	PL	yes
2019-12-12 17:42:08	79.96.12.16	cloudserver053864.home.pl	Not listed	AS12824 HOMEPL-AS	PL	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-12-20 05:32:02	http://polandpresents.info/libraries/personal-6...	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2019-12-17 06:27:05	http://polandpresents.info/libraries/statement/...	Offline	doc emotet epoch2 heodo	spamhaus
2019-12-12 17:42:08	http://polandpresents.info/libraries/65284EU/	Offline	emotet epoch2 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2019-12-14 17:46:06	51fa2da211b25dfa56b759c79d7b52c4615b3f4beebcde07a49ba3d4776062c8	exe		Heodo
2019-12-14 15:44:57	f097fa22bcb7e1164b575f339db9777077084595ca85fff0a96bbad3b2f3fd94	exe		Heodo
2019-12-14 15:28:14	2ae9773b77d328976bafe3e8ec76fa8cfe1343ed2b9739367e51223d5fb3489b	exe		Heodo
2019-12-14 13:43:05	a5d5ef5fcda6adf40e9480f476f58a7ad63ed65119afbdfd3f1edcd517d881b0	exe		Heodo
2019-12-14 11:41:51	5723beda11f2a98fac2c0e4be564b952a4e6314b143f2125d3288607cbde6cd0	exe		Heodo
2019-12-14 02:59:49	181a79a35af190ce05e5bac09e23d8670c247db0b55f465ff2af8c834e984ed6	exe		Heodo
2019-12-14 01:37:09	6cf54601213e918f6f70d5d1a394932ba42bf99415392125f57453f38725d1d4	exe		Heodo
2019-12-13 23:35:07	39f7c5c06078d003ec402ec25eebf265a96b8714c03127e3078b09ae64bb2476	exe		Heodo
2019-12-13 22:29:08	21556b2d910de92eee35636dd5e5b04935525ddbc544f2f632ac3b1d5acbeeb6	exe		Heodo
2019-12-13 20:28:01	218a87ca8c818acf90e3e7ee180a7d064d55c10f6c2f172ddaa9941f8c1c9531	exe		Heodo
2019-12-13 19:17:56	a993cb9fa4c615bb7656a88f48e3aabbbab3dc2d851ddccb1b80e987a6e3cfc4	exe		Heodo
2019-12-13 17:17:08	ee27ce622d86fc20b1805c2ad66dd90bd7c235083e17217d38ee292488cb19c5	exe		Heodo
2019-12-13 15:14:41	6f65c3773b031f0aa512fa527da8e004a3c9694ae5ad3890ca0c6c791b6a61a9	exe		Heodo
2019-12-13 14:51:52	8c6cbd92b48db1f7414c2bcb5aaa2403b37ce273a53483add52edfff52f959f6	exe		Heodo
2019-12-13 14:01:34	11c68ed562aae39ce2caa8c3520826595e24c978f4f01ecd25ba2825db21ab66	exe
2019-12-13 09:59:33	d9a7f0ef3140c6ad0759c1fa89c6b387b482945c4b48341070ff3661fea36d07	exe		Heodo
2019-12-13 08:32:27	0be549352e264c4aebca790a05294684f11ba46b3260cb20b67cfae925634b4a	exe		Heodo
2019-12-13 07:18:29	e01309bf35de5bb3d967004bb003a5a523d97020234abb34eac14878efa0d68c	exe		Heodo
2019-12-13 05:17:47	38f321e1d7367a1002f53d162279135440272af848efe75a6aab71f299599eb2	exe		Heodo
2019-12-13 03:25:21	a1fc8e140dfd5d46b9bdf53cb516cb2aa2ec84bdb29290b5cfea4bbccadd6326	exe		Heodo
2019-12-13 02:20:28	5eecdf69c0aad3b41b4310954423d85d121e962b631ab27b47ce8445facd99a1	exe		Heodo
2019-12-13 01:17:23	e19158e6d8c78cd831df154b5fb36a779a033925be47374d16f59011617aad64	exe		Heodo
2019-12-12 23:16:14	e4fdad187551a7c662fb384bb6b1688229602f4bfd28f49f5b077261ff45f2f2	exe
2019-12-12 22:20:16	cbead8b96feb4f51c39055b2857bc3d57055bcc12d75573dd0c7dc1dca1bd204	exe
2019-12-12 21:24:36	d84723b06c9490b9bc0281958d5b80fcad7b3e5158d8782a015cdd44174077c5	exe
2019-12-12 20:27:48	37a4a00aae9d2d71e43a836194da6ed7917fb40d3b4aa1a20c82089c0bed89e8	exe		Heodo
2019-12-12 19:31:21	bc762aed5c64a3d3d4ddbc3406f36cb8cac182f2b40e873df558f391749a8123	exe		Heodo
2019-12-12 17:42:08	b3f8e0e34a15d6319aa7e97dc3dcc726aeabc786fb451171083391ba362361c5	exe		Heodo