URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host thewinslowgroup.com.

Database Entry


Host: thewinslowgroup.com
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-04-13 04:42:13 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-12-21 17:18:45 50.63.202.94ip-50-63-202-94.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-12-21 02:17:44 184.168.221.81ip-184-168-221-81.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-12-19 20:39:07 50.63.202.89ip-50-63-202-89.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-12-19 17:42:30 184.168.221.90ip-184-168-221-90.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-12-19 14:38:17 50.63.202.70ip-50-63-202-70.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-04-30 18:31:42 184.168.221.56ip-184-168-221-56.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USyes
2018-04-13 04:42:19 132.148.60.1ip-132-148-60-1.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-04-13 04:42:19http://thewinslowgroup.com/Service-Invoice/Offlinedoc emotet ext Clean@JRoosen