URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: serviceclic.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-09-29 22:19:06 UTC
Total malware sites :1
A record(s) observed :15

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-10-22 14:24:19 188.114.96.3Not listedAS13335 CLOUDFLARENETn/ayes
2025-10-22 14:24:19 188.114.97.3Not listedAS13335 CLOUDFLARENETn/ayes
2025-07-25 02:20:00 104.26.14.88Not listedAS13335 CLOUDFLARENETn/ano
2025-07-25 02:20:00 104.26.15.88Not listedAS13335 CLOUDFLARENETn/ano
2025-07-25 02:20:00 172.67.71.197Not listedAS13335 CLOUDFLARENETn/ano
2025-06-15 06:00:57 199.232.171.52Not listedAS54113 FASTLY- FRno
2025-06-17 00:52:59 146.75.123.52Not listedAS54113 FASTLY- DEno
2025-06-17 23:33:04 199.232.55.52Not listedAS54113 FASTLY- GBno
2025-07-06 12:54:07 146.75.119.52Not listedAS54113 FASTLY- DEno
2025-05-12 13:12:20 151.101.155.52Not listedAS54113 FASTLY- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-09-29 22:19:08https://serviceclic.com/wp-includes/attachments...Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-09-30 09:28:41540c085bf41d7ded925345f785582459e99ff1125a0400d9e6b151676fcc5f6ddocHeodo
2020-09-30 09:15:103b7c744c1ce6fed0e44750032b24ce1e651586ac1b2e01d815796e30a2aaa9badocHeodo
2020-09-30 08:53:569849bf91ef029b6a492bd6c1b39b888e264d7b14a1574d64502706cc65d51576docHeodo
2020-09-30 08:17:5925b7f727f0f1e44dc0b90a12f28264418053fc308ea16c0050ae887a1db7d5abdocHeodo
2020-09-30 08:08:43173d3683f3f267d179bd0a2861ce23edcef457430364fac577f89dea9c9950b0docHeodo
2020-09-30 07:40:44560d243b886163bf8799f1980448da2bba89ef24b99028c48b3687a710a80fdadocHeodo
2020-09-30 06:57:41591579fba418bcc6bd1fc4bb4a299348db435c11b203cd049b17c9830f211087docHeodo
2020-09-30 06:01:2022f844a158ab002c4375f2234f5a539f0b1b5199f33b442d4869765ea22ca27adoc Heodo
2020-09-30 03:23:27892d8f9cfb26bae3277304d3396027dd55d0899e78181a1431bb43e29dd3e857docHeodo
2020-09-30 02:58:37643a118d94807a21df75a7aede93130326ac04ce84a10d9fa67b1f5f87d3467adocHeodo
2020-09-30 02:33:05f8b2d066f5a3d657edb1544f9df31a9a7b3121c5c14ddb1b96b50ddd69b44c22docHeodo
2020-09-30 02:11:17a3aa47fd0e69bb9abfdf3263e13b7d854f23cc07579e8e294a8930e6498d6143docHeodo
2020-09-30 01:51:531d44cd8c3d04874dc41108bc844eb637f657064927fc28927f68c95fe596bcaadocHeodo
2020-09-30 01:35:321b7ae75c0843e24188c16e98283ae53b2d5d441a3149a30eae0eda9db7781220docHeodo
2020-09-30 01:19:410cbe205dde93631435eaf136feea1e35c86b49f20a0067c26fde038b48e2d725docHeodo
2020-09-30 01:01:24a87836e6fbf70862d74980ad32f16b6dfe157bcea1172817e7235764aae0c4dedocHeodo
2020-09-30 00:32:31541afbe8b457f589a760cae7ecbf5d520a7f1ecb81bf9d2e2f5ddf90cad8a418docHeodo
2020-09-30 00:20:24b89e3c01c95337c6976cfdbc20163b4375eb1a0a76a87335e891fcd932c361d1docHeodo
2020-09-29 23:45:04dc873a463b8cbee41eb8683d98db5a331553402391ba1c16e664c7034eb1acafdocHeodo
2020-09-29 23:41:449a24d61f24a1211065b986def505c02b66a94f2b1cbde8fc6ef868391c24d4f3docHeodo
2020-09-29 23:14:31349dd2ac63132716ea7360223fd038575e1b7144925c60d87589880fbd488670doc Heodo
2020-09-29 22:43:132e0fc31a6ff8f20507c6979fa9b5be9e11f13d424e2962ec30f1fc596c069898docHeodo
2020-09-29 22:37:0987687f422879d033f49c258046d04d4456ca8476353a750ba425c6642d61d3f2docHeodo
2020-09-29 22:19:08eeb152640a9662420b865da4ac765f66469ebd7aa3568a51b62e286ce5806435docHeodo