URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-09-01 15:47:04	81.169.145.151	w97.rzone.de	Not listed	AS6724 STRATO	DE	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-09-01 15:47:04	http://tjdengler.info/cgi-bin/r/	Offline	emotet epoch1 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-09-02 06:30:54	6dd5d673725341b0790fa4f3bed96e49d656118994b0b19c38e62fd53defb39d	exe		Heodo
2020-09-02 04:58:49	598bea746526d6eae854e126eac4b4b22e1023363875c53142ef4b05491fdcb2	exe		Heodo
2020-09-01 20:45:23	b6f2457e50dc2fdd2cf809ebf63577c7277e0e26bf8e87188572c01d96d48f97	exe		Heodo
2020-09-01 18:34:56	fb13df8b0a039ba2084a3a5e4214347716b56fdbd7f3c708717bb439acce3656	exe		Heodo
2020-09-01 18:20:40	cacf14db3d7287af50072ffc5c15bcb6f7e9df4295bad534b80e5b679d0ff766	exe		Heodo
2020-09-01 18:03:37	48197eb606cbec61d55f47ba76318e16469455f0e22066d9812a06b46624f500	exe		Heodo
2020-09-01 17:44:19	20f412f847cc558eb87e9c0e52ffe201132ad73151b176fa185925387f3a46e5	exe		Heodo
2020-09-01 17:31:24	8914e4d40adb380643d8b294a81a1a11bbf834a3f1752bcb75cd044e0a2a953a	exe		Heodo
2020-09-01 17:20:56	e7ca058e6d51026d628499c03da1282be457c6d6298503867f487f500ab0b24e	exe		Heodo
2020-09-01 17:05:50	02903f53fd469fcff84b7727f0b5d007d2b4d0aa2b9f3d0366659b97dce47545	exe		Heodo
2020-09-01 16:51:13	3b1e374b7a03d514421e99e23022a5b8f3b3f1e4e474c8640711b50e6f469fed	exe		Heodo
2020-09-01 16:34:22	a097cfa8844b7663263c23f9138af59be55b5925e104641f441488fbb3a74c55	exe		Heodo
2020-09-01 16:18:52	321b42b24ec5dea8df2a7a1297373d693e5213af3288184118280359b7eda23a	exe		Heodo
2020-09-01 16:04:27	c2cdc4e3d229986a2f8ec05f8e3a7365f30a904ef320f1a005b80f1d02a737ee	exe		Heodo
2020-09-01 15:47:04	9412070a444957daa434c15d5c4a6b8397405ee0135d67776de0faae8dbc35b5	exe		Heodo