URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: saber.mechanolube.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-08-26 20:56:04 UTC
Total malware sites :1
A record(s) observed :2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-07-26 07:54:50 52.223.13.41a74e89cf4458da039.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2020-08-26 20:56:05 13.235.227.231ec2-13-235-227-231.ap-south-1.compute.amazonaws.comNot listedAS16509 AMAZON-02- INno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-08-26 20:56:05http://saber.mechanolube.com/test/payment/n4x51...Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-08-27 07:29:5677823f121fe25decfc185abf589256c90a5c98daa17c8e6a6e2acc192bb84522docHeodo
2020-08-27 07:11:1891eee6c53cef6973fbd184df00499fd451d2c44b837ff7011cd99368298633a2docHeodo
2020-08-27 06:53:13f3f87a6dd05dca7f7bf21316df4aa90bbc92fd53a45b004fa5edd7b6017ea8acdocHeodo
2020-08-27 06:38:17560fc48350b60321bef9c84786d68acb7b7f4414d53d1fe7660563cd05cb5a1adocHeodo
2020-08-27 06:24:42ccd219a6f531ed3f9ff84a1ce8e664e71c3dcc4af09fe196889fe1e1b69ed956docHeodo
2020-08-27 06:02:045651215bf90d3d27bf652a23f6f4ab03e32a080fba71d964022a87038fa6f1b0docHeodo
2020-08-27 05:48:16abd2e27899da09f53fa00ceb940f6a914cd44af6cd1d754f783aff922eb9c45bdocHeodo
2020-08-27 05:17:4640761e27d5738895fd87e37555b219f0b556bc51d2701d965a51cabebfdabb74docHeodo
2020-08-27 04:25:5341627e3471672730007dc13d026ac234950ae1f71564721c77dd5aff29e9c51bdocHeodo
2020-08-27 02:55:525e2acb078bf706a90389d90636ddaf5d332c47325336781c2ab14600e34adb05docHeodo
2020-08-27 02:38:56d20d5bab876240cbf908d60dc4ac87b57258f02fbd9202d50733891f22d29592docHeodo
2020-08-27 02:20:41874b498a569260ed044256f13bd87d1a3697f02a17a364d2d61ba9005e12cd25docHeodo
2020-08-27 01:59:334ce815a9423e52b38ceedc5af97bd2f02672b7ffde760730599452b87050eb7bdocHeodo
2020-08-27 01:45:057fe66f85659a10160846a834f8b4befde4e554e2c6e6586097218eed58c96790docHeodo
2020-08-27 01:25:16c2da9f1e760b2054a7244c442736269184220a1e7639e186f9eb4022ed7dba3ddocHeodo
2020-08-27 01:06:19898606ce53cb944570ef3226fed74c7f3d6cfab92352cacf96d3a190cb045145docHeodo
2020-08-27 00:48:33cd0f5f2cc1f1f1bc7dc7bb9fe38aed374ad228315804fa2a759639ab42a35d89docHeodo
2020-08-27 00:31:38c1ed9bf98cfcaa46afd1c9002d8d0a5cb79e5e83636f7283a052df1dc6e27528docHeodo
2020-08-26 23:00:46538f09c0b0e7a2ad7a2238635d7e136726a91b996a98d144ebe8a8b3b70fda38docHeodo
2020-08-26 22:48:36252aeabb4c6b7b8dd88ed402898809ca4d94da45526962188c72d96f0d21e8b6docHeodo
2020-08-26 22:26:29c1010a64991ed1fa9519bd2ff0ee0abc2b87853d34efd4a6c2e3f6a7b4fbaa75docHeodo
2020-08-26 21:55:59bf3d5149b15fa4399dfadac2556d328a9707b9332e9f063dae1d4c90e36c480adocHeodo
2020-08-26 21:33:0596ca79965f32aaf2b62d64767a1b73c5c33974afa8e7efa8b99f300478bbfa84docHeodo
2020-08-26 21:14:584e48203902e2971b1f0046c8b0e664760e818aad6c055903981a67549c91eab6docHeodo
2020-08-26 20:56:059284c7e6b91850c02fecc222938859e5545d62484b7d969c48c182c17b4e328bdocHeodo