URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: ptwmusic.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-09-01 18:17:06 UTC
Total malware sites :1
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-28 00:49:54 34.175.243.3232.243.175.34.bc.googleusercontent.comNot listedAS396982 GOOGLE-CLOUD-PLATFORM- ESyes
2020-09-01 18:17:08 217.76.142.113llgk604.servidoresdns.netNot listedAS8560 IONOS-AS- ESno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-09-01 18:17:08http://ptwmusic.com/thumbs/TN/Offlineemotet ext epoch1 exe heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-09-02 06:30:556dd5d673725341b0790fa4f3bed96e49d656118994b0b19c38e62fd53defb39dexeHeodo
2020-09-02 04:38:37598bea746526d6eae854e126eac4b4b22e1023363875c53142ef4b05491fdcb2exeHeodo
2020-09-01 20:45:25b6f2457e50dc2fdd2cf809ebf63577c7277e0e26bf8e87188572c01d96d48f97exeHeodo
2020-09-01 18:20:24fb13df8b0a039ba2084a3a5e4214347716b56fdbd7f3c708717bb439acce3656exeHeodo
2020-09-01 18:17:088477ae0498487ca0dd4b40bed21ba5a3963d1c5af945c8d72585aa948924d4b1exe Heodo