🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: sapibook.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2019-11-29 07:38:28 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :3

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-20 10:30:25 172.65.211.209Not listedAS13335 CLOUDFLARENETn/ano
2025-04-27 15:58:47 38.238.108.80Not listedAS174 COGENT-174- USno
2019-11-29 07:38:48 39.97.245.115Not listedAS37963 ALIBABA-CN-NET- CNno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2019-12-10 21:58:11https://sapibook.com/wp-includes/EXjAU/Offlinedoc emotet ext epoch3 heodo ext Cryptolaemus1
2019-11-29 07:38:48https://sapibook.com/wp-includes/uqs9371/Offlineemotet ext epoch1 exe heodo ext Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2019-11-30 05:26:43b43dc18e1cdcbae16420f922e32b41f159b5bbfdf853ad7fe60c4a90df9bcfeaexe Heodo
2019-11-30 03:50:51e07d55db983d6fdf4582fd101df6364260f8c4b562148b1750d648281388ae0eexe Heodo
2019-11-30 01:49:40e60dc7f1a113fc8e18e96de5e314db463a2bd2784b9925a11c470db5bb0d1743exe Heodo
2019-11-30 00:44:185c2b3f3716e08047a7d1fd22bff0ccb7b9b76752b9841147ad54ceaa76273294exe Heodo
2019-11-29 22:56:4802a556ec6e0a4be7f2c2be67ceb057cbd90c036f50144225729b6484ac652694exe Heodo
2019-11-29 21:08:33fb4a82d128a591a84c1c493395158a4ac0d8f15cd0c349f019b0b4d69fb753dcexe  
2019-11-29 20:00:259d6f14615046d30e9061f2ca83507dc32b9286e0523d830ad187010605b2dd72exe  
2019-11-29 18:55:459e367fc6621944c10a27483f2f2c46fd5ee19e43448c3b49830cf4739b80622fexe  
2019-11-29 18:17:17e787dba061d08479637fc625bb901d4c8730bf5af3d079776f0c12a37ca8562fexe  
2019-11-29 17:58:206c443a892369be35974e459745acf7e00384dddbbd2647e7b1eb87f481a34e1bexe  
2019-11-29 16:34:457e444d3e9bb093ec205f2fd5f0dd8d47ff4192b08d5ec66cd1ce7ff22ab1ae62exe  
2019-11-29 13:58:41c65d7a71579c41b4b420b7d569ef85667e12bf40b6b23452e7407a2cf8195a1fexe  
2019-11-29 12:21:5074b82b5fcc9d15ddd62fdc007c68d632c5d06c4a68d84b771079c78124fb32e3exe  
2019-11-29 11:15:0190a452e189d1594078eeae8f06686f1bf93339ace00ae2b2b692400609375602exe  
2019-11-29 10:05:3752a9eccf8a48b9aef3b9749aa3c409ef9289140918a24aaabd8035da781bc0aeexe  
2019-11-29 08:18:18fc92c07b32461873410549a0d787fceef21f6bd3f989881feed6b40471d80293exe Heodo
2019-11-29 07:38:472437ecdde25135a703cb4c4f71654334b213d7aa4f17e3311ea80bb686b2f6d3exe Heodo