URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | theholidayroads.com |
|---|---|
| Domain registrar: | Namecheap  |
| Domain registration date: | 2021-07-25 18:16:23 UTC |
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2022-01-31 16:17:03 UTC |
| Total malware sites : | 6 |
| Online malware sites : | 4 (67%) |
| Offline Malware sites : | 2 (33%) |
| Newest active malware site : | 2022-01-31 18:04:07 UTC |
| Oldest active malware site : | 2022-01-31 18:04:05 UTC (Age: 4 years, 4 months, 17 days, 4 hours, 4 minutes) |
| A record(s) observed : | 6 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-12-06 05:20:23 | 15.197.148.33 | a2aa9ff50de748dbe.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2025-12-06 05:20:23 | 3.33.130.190 | a2aa9ff50de748dbe.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2023-04-20 10:13:19 | 207.244.254.17 | vmi1296997.contaboserver.net | Not listed | AS40021 CONTABO-40021 | US | no |
| 2022-06-13 11:35:37 | 162.0.226.213 | nc-ph-2609.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
| 2022-03-28 22:21:50 | 162.0.227.42 | nc-ph-2722.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
| 2022-01-31 16:17:05 | 162.0.208.47 | nc-ph-2937.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-01-31 18:04:07 | https://theholidayroads.com/public/userbackend/... | Online | doc hancitor  html |  Cryptolaemus1 |
| 2022-01-31 18:04:07 | https://theholidayroads.com/public/userbackend/... | Online | doc hancitor html | Cryptolaemus1 |
| 2022-01-31 18:04:06 | https://theholidayroads.com/public/userbackend/... | Online | doc hancitor html | Cryptolaemus1 |
| 2022-01-31 18:04:05 | https://theholidayroads.com/public/userbackend/... | Online | doc hancitor html | Cryptolaemus1 |
| 2022-01-31 16:17:06 | https://theholidayroads.com/public/userbackend/... | Offline | hancitor | Anonymous |
| 2022-01-31 16:17:05 | https://theholidayroads.com/public/userbackend/... | Offline | hancitor | Anonymous |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-12-06 20:24:49 | 6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023 | html | ||
| 2025-12-06 20:10:18 | 6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023 | html | ||
| 2025-12-06 06:32:51 | 6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023 | html | ||
| 2025-12-06 05:53:08 | 6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023 | html |