URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 12:08:46	141.193.213.10		Not listed	AS209242 CLOUDFLARESPECTRUM	US	yes
2025-04-27 12:08:46	141.193.213.11		Not listed	AS209242 CLOUDFLARESPECTRUM	US	yes
2020-10-26 15:38:06	52.54.52.253	ec2-52-54-52-253.compute-1.amazonaws.com	Not listed	AS14618 AMAZON-AES	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-27 02:09:04	http://secuado.com/wp-content/plugins/apikey/6/	Offline	emotet epoch1 exe	Cryptolaemus1
2020-10-26 15:38:06	https://secuado.com/wp-content/plugins/apikey/6/	Offline	emotet epoch1 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-10-26 18:08:44	c080b1a8fcdfc1af80acd6e387278a629b345535434fe59f2f607af62f3883e4	exe		Heodo
2020-10-26 17:35:13	9f57158dcc09982a4da2693804e461a3fbad40b2fdcdf1ae0fdc1fdd99652c99	exe		Heodo
2020-10-26 17:23:32	149c0a7fa86d678972dd30b799f89f67721ef7571ef9a25339f816f68462d0b2	exe		Heodo
2020-10-26 17:00:21	64752e457ef707dd96774bc194b31956f5d2207a8642892031b69cfe93a1c332	exe		Heodo
2020-10-26 16:32:47	d5937114e276e65094b6bc10ff7adb28b56385ac0807ec510a91ff11783b81aa	exe		Heodo
2020-10-26 16:11:40	9a01d1b8f040b5655b15545a8014143121d965e725ddc973251308ec64dc5585	exe		Heodo
2020-10-26 15:38:06	109e100eb4686a26b058dde491ab2d8cadecb589d3e5cb431bfac300aced9462	exe		Heodo