URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	tests1.yormy.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2018-08-23 14:04:37 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2018-08-23 14:04:39	37.97.211.18	37-97-211-18.colo.transip.net	Not listed	AS20857 TRANSIP-AS	NL	yes
2018-09-12 06:16:53	137.97.211.18		Not listed	AS55836 RELIANCEJIO-IN	IN	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2018-09-07 03:05:51	https://tests1.yormy.com/FILE/En_us/Outstanding...	Offline	doc emotet epoch2 heodo	Cryptolaemus1
2018-09-07 03:05:50	https://tests1.yormy.com/FILE/En_us/Outstanding...	Offline	doc emotet epoch2 heodo	Cryptolaemus1
2018-09-06 13:14:49	http://tests1.yormy.com/FILE/En_us/Outstanding-...	Offline	doc emotet heodo	unixronin
2018-08-31 05:18:29	https://tests1.yormy.com/wp-includes/VjTN6c/de_...	Offline	doc emotet epoch2 heodo	Cryptolaemus1
2018-08-31 05:18:28	https://tests1.yormy.com/wp-includes/VjTN6c/de_...	Offline	doc emotet epoch2 heodo	Cryptolaemus1
2018-08-30 11:17:31	http://tests1.yormy.com/wp-includes/VjTN6c/de_D...	Offline	doc emotet heodo	unixronin
2018-08-25 07:13:05	https://tests1.yormy.com/wp-includes/22HBB/BIZ/...	Offline	doc emotet heodo	zbetcheckin
2018-08-25 00:21:25	http://tests1.yormy.com/wp-includes/22HBB/BIZ/B...	Offline	doc emotet heodo	Cryptolaemus1
2018-08-23 14:04:39	http://tests1.yormy.com/wp-includes/22HBB/BIZ/B...	Offline	doc emotet heodo	unixronin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2018-09-01 07:11:27	8e04c42475bc3540925710dd1c71fad658b7cb19b6b2206fb59d0fea9b37cd2a	doc	Heodo
2018-09-01 07:04:32	8e04c42475bc3540925710dd1c71fad658b7cb19b6b2206fb59d0fea9b37cd2a	doc	Heodo
2018-09-01 07:04:31	8e04c42475bc3540925710dd1c71fad658b7cb19b6b2206fb59d0fea9b37cd2a	doc	Heodo
2018-08-25 07:13:05	c08b910e03329dbf10e3317a0419a458414db07b4724626e343127067263a03a	doc	Heodo
2018-08-25 00:21:24	c08b910e03329dbf10e3317a0419a458414db07b4724626e343127067263a03a	doc	Heodo
2018-08-24 23:06:39	c08b910e03329dbf10e3317a0419a458414db07b4724626e343127067263a03a	doc	Heodo