URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: santafetails.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2018-05-30 00:02:01 UTC
Total malware sites :20
Online malware sites :0 (0%)
Offline Malware sites :20 (100%)
A record(s) observed :7

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 12:58:30 104.21.61.170Not listedAS13335 CLOUDFLARENETn/ayes
2025-04-27 12:58:30 172.67.212.95Not listedAS13335 CLOUDFLARENETn/ayes
2018-09-28 09:49:10 45.60.22.79Not listedAS19551 INCAPSULA- USno
2018-09-28 09:49:10 45.60.98.79Not listedAS19551 INCAPSULA- USno
2019-09-02 22:00:37 50.63.202.7676.202.63.50.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-09-02 21:51:32 184.168.221.8282.221.168.184.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2018-08-27 13:05:10http://santafetails.com/dcz6vEsOfflineemotet ext exe heodo ext payload Cryptolaemus1
2018-08-27 08:12:08http://santafetails.com/default/US_us/Open-invo...Offlinedoc emotet ext heodo ext Anonymous
2018-08-21 04:43:56http://santafetails.com/10RMVJDFCW/biz/BusinessOfflinedoc emotet ext heodo ext Cryptolaemus1
2018-08-10 09:21:07http://santafetails.com/default/US_us/Open-invo...Offlineheodo ext zbetcheckin
2018-08-10 04:21:14http://santafetails.com/default/US_us/Open-invo...Offlinedoc emotet ext heodo ext Cryptolaemus1
2018-08-09 05:53:19http://santafetails.com/PAY/FKIR98781211579LC/1...Offlineheodo ext zbetcheckin
2018-08-07 10:25:03http://santafetails.com/PAY/FKIR98781211579LC/1...Offlinedoc emotet ext heodo ext Anonymous
2018-08-01 16:13:57http://santafetails.com/default/Rechnungs-docs/...Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1
2018-07-02 21:00:25http://santafetails.com/Independence-DAY/Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1
2018-07-01 14:47:08http://santafetails.com/Invoices-docs/Offlineheodo ext JayTHL
2018-06-30 06:11:47http://santafetails.com/Past-Due-Invoices-06/28...Offlineemotet ext heodo ext p5yb34m
2018-06-28 14:58:27http://santafetails.com/Past-Due-Invoices-06/28...Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1
2018-06-26 13:17:30http://santafetails.com/DOC/Rechnungsanschrift-...Offlineemotet ext heodo ext Malware_News
2018-06-22 22:42:04http://santafetails.com/Fakturierung/Erinnerung...Offlinedoc emotet ext heodo ext Cryptolaemus1
2018-06-21 13:03:31http://santafetails.com/Fakturierung/Erinnerung...Offlineemotet ext heodo ext Malware_News
2018-06-18 13:34:07http://santafetails.com/Rechnungs/Offlinedoc emotet ext heodo ext Cryptolaemus1
2018-06-13 21:37:03http://santafetails.com/IRS-Transcripts-04/46/Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1
2018-06-11 22:28:08http://santafetails.com/lKcxC0V/Offlineemotet ext epoch1 heodo ext payload Cryptolaemus1
2018-06-04 07:14:17http://santafetails.com/UPS_FR-04/06/2018-012R/31/Offlinedoc emotet ext heodo ext abuse_ch
2018-05-30 00:02:06http://santafetails.com/Facture-impayee-29/05/2...Offlinedoc emotet ext heodo ext Cryptolaemus1