URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host saleswork.nl.

Database Entry


Host:saleswork.nl
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2019-02-01 23:20:09

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-02-01 23:20:10185.182.57.28vserver297.axc.nlNot listedAS48635 ASTRALUS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-02-18 11:44:20http://saleswork.nl/Hb48aHy9VnAy8/Offlineemotet epoch2 exe Clean@Cryptolaemus1
2019-02-13 23:45:36http://saleswork.nl/9883973888669/sKfw-JJWCx_zdAVRkDnn-xq/Offlinedoc emotet epoch2 heodo Clean@Cryptolaemus1
2019-02-12 01:11:27http://saleswork.nl/verif.accounts.resourses.com/Offlinedoc emotet epoch1 heodo Clean@Cryptolaemus1
2019-02-08 19:00:12http://saleswork.nl/En/Invoice_number/HdIvk-eD_W-ba0/Offlinedoc emotet epoch1 heodo Clean@Cryptolaemus1
2019-02-06 17:46:02http://saleswork.nl/HOxiC_uM-sjsGxe/RzI/Clients/022019/Offlinedoc emotet epoch1 heodo Clean@Cryptolaemus1
2019-02-01 23:20:10http://saleswork.nl/ojVdu_YXU-cFABzNWf/Nz/Documents/02_19/Offlinedoc emotet epoch1 heodo Clean@Cryptolaemus1