URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	thehansongrp.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-10-03 20:53:09 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-10-03 20:53:14	146.66.67.208	ip-146-66-67-208.siteground.com	Not listed	AS13037 ZEN-AS	GB	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-10-04 01:15:03	http://thehansongrp.com/wp-content/8xyma8_md464...	Offline	emotet epoch2	Cryptolaemus1
2019-10-03 20:53:14	https://thehansongrp.com/wp-content/8xyma8_md46...	Offline	emotet epoch2 exe heodo	p5yb34m

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2019-10-04 21:39:08	1d51d8e9ae1d67cb804fb28024b04969fd5888c3befece09547e5506ee946027	exe	Heodo
2019-10-04 21:20:10	e4594de3639376b04becd1ec0ec4ca3f5b898fa627863a35c4069da913beed4c	exe	Heodo
2019-10-04 21:05:19	431828023bec2aa837c52d51dabd5ce4e33f9cdaf97d0afd3072a924bffe75df	exe	Heodo
2019-10-04 20:19:23	3f8898e03e8973a2dbb2d499e9505fc12246d621e9cd62d29307d0373adf5de1	exe	Heodo
2019-10-04 20:07:18	faabccb1ffe41bc64521776a9ce31eb61725beb8efaad424de61bc6aa432d09c	exe	Heodo
2019-10-04 19:53:23	d99d0564cee732273bc8faa63dc71fc5db1fcf9e667ec62664d8959e9cb2b6ec	exe	Heodo
2019-10-04 19:15:23	28ef348c64d9b822a9056b6403d3c7d9e348a8e272f45dbed76f4b799041410e	exe	Heodo
2019-10-04 19:04:29	49784a37de8cf2398dd0e90f2a6cb85aecd9d725d44fcee92d254a02ea2859e1	exe	Heodo
2019-10-04 18:47:15	454522f207d5d83a4fb9f1ae40968cf1715ccdf3f59646da4ce4eb05d5f16262	exe	Heodo
2019-10-04 18:35:26	2d3339830687dfa3a6a80d125acd4a81190e1775f5a54b2dd36125844e3e19f0	exe	Heodo
2019-10-04 18:17:18	a6e58fcdd3b8743865c45d8035bcca1f3ebfde77d9ff9139b5a379289a088cd7	exe	Heodo
2019-10-04 17:30:19	e1612243b809d8854768d8e34a45bcc7567351e554bc653951608dbbeecfbfcd	exe	Heodo
2019-10-04 14:35:23	94ea3198c0ee5fd6d98da67276e846beda3709f150aaeac1e4ab8d39e3001f76	exe	Heodo
2019-10-04 12:06:18	520657d4c787ef47085ee60a196a654d65439e574b39c45df794fc2b7bfff48d	exe	Heodo
2019-10-04 10:48:29	8b975dce544d439187382cb2f859b1dce832d3f7779538377caf622ad9299e3d	exe	Heodo
2019-10-04 10:04:33	b7c9a73a49165e2977ac4be3bf4f9762bbb426ed548a61bbcf333abbf610777a	exe	Heodo
2019-10-04 07:30:42	4f62184074f2f62c718f5905743e511839dd41ba62aa40650838f1b8b9f94c0a	exe	Heodo
2019-10-04 00:39:20	f0ac854808ef5855438fc02b394222d79acf637b5413a7b13c0af185c8d6805a	exe	Heodo
2019-10-03 21:37:09	c2de67b34a3af0625341e5bce27909e0e2d5d28763ecedc7571755d00cf50947	exe	Heodo
2019-10-03 20:53:14	272ac7d9c7bdd245a69c7ef795ec71193907342bbec376d99aac58d998bf7446	exe	Heodo