URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-05-01 01:53:45	149.255.58.70	cloud107.unlimitedwebhosting.co.uk	Not listed	AS34931 AWARESOFT	GB	yes
2020-10-21 01:43:03	149.255.58.11	cloud001.thundercloud.uk	Not listed	AS34931 AWARESOFT	GB	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-21 01:43:03	https://servu.co.uk/test/Reporting/LJKxaT/	Offline	doc emotet epoch3 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-10-21 08:45:04	20822d454fc7b4ccc00e84d41fcfebef444b6d243921dd0e7db0c7252f1e319b	doc		Heodo
2020-10-21 08:19:47	4b091f47077d168f83c5f39f3ca6837c70c9fef749880418389cf07514420dc3	doc		Heodo
2020-10-21 08:01:45	a3b6842573584f704d6a8e14964f20811e162c91bcc4e3aa8b0eb7c7948db506	doc		Heodo
2020-10-21 07:39:36	51ab187886aefdddbe682cc0044049fd5c06bac5f1cda813a77165f3ad31548a	doc		Heodo
2020-10-21 04:09:06	d8e0f462d8d75918d376254506d8d9ca846f6fa1f33076a091cd9f61832efbc2	doc		Heodo
2020-10-21 03:35:32	b7b2d0ef7df5007d18a8a857ab7b35956aa9060aa4edfb1bd80e17299d53d9a7	doc		Heodo
2020-10-21 02:58:49	a9b5951976e5aebe82b1a18ef33e379ec5f3a36a04b89103649e54d7dc746aec	doc		Heodo
2020-10-21 02:21:37	5ab195348086d508a9be2e1c480fa60e9de009a7f057dbaf696f8468ec4fe0f5	doc		Heodo
2020-10-21 01:43:03	a3bd9261b5a8844a6a6a77e06f0eabf6a21d998001e99718a42f8bfc8147762d	doc		Heodo