URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	top4pics.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2018-06-01 19:12:24 UTC
Total malware sites :	12
Online malware sites :	0 (0%)
Offline Malware sites :	12 (100%)
A record(s) observed :	9

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-07-03 02:47:10	35.157.26.135	ec2-35-157-26-135.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	yes
2025-07-03 18:19:06	63.176.8.218	ec2-63-176-8-218.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	yes
2025-11-07 18:41:01	18.208.88.157	ec2-18-208-88-157.compute-1.amazonaws.com	Not listed	AS14618 AMAZON-AES	US	no
2025-11-07 18:41:00	98.84.224.111	ec2-98-84-224-111.compute-1.amazonaws.com	Not listed	AS14618 AMAZON-AES	US	no
2025-04-27 11:57:23	3.125.36.175	ec2-3-125-36-175.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	no
2025-04-27 13:46:45	3.75.10.80	ec2-3-75-10-80.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	no
2025-04-27 11:57:23	3.124.100.143	ec2-3-124-100-143.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	no
2018-06-01 19:12:40	67.227.193.77		Not listed	AS32244 LIQUIDWEB	US	no
2025-06-04 05:54:01	100.28.201.155	ec2-100-28-201-155.compute-1.amazonaws.com	Not listed	AS14618 AMAZON-AES	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2018-06-30 06:12:58	http://top4pics.com/Invoice-for-sent-28/06/2018	Offline	emotet heodo	p5yb34m
2018-06-30 05:59:20	http://top4pics.com/New-Order-Upcoming/Invoice-...	Offline	emotet heodo	p5yb34m
2018-06-28 19:32:09	http://top4pics.com/Invoice-for-sent-28/06/2018/	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2018-06-26 13:17:40	http://top4pics.com/New-Order-Upcoming/Invoice-...	Offline	emotet heodo	Malware_News
2018-06-25 18:03:03	http://top4pics.com/Purchase/Invoice-5111545/	Offline	doc emotet epoch2 heodo	Cryptolaemus1
2018-06-22 13:00:22	http://top4pics.com/Purchase/Invoice-5111545	Offline	emotet heodo	Malware_News
2018-06-19 15:13:08	http://top4pics.com/Rechnungs-scan/	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2018-06-15 15:42:47	http://top4pics.com/Invoices-payments-and-quest...	Offline	heodo	JayTHL
2018-06-14 16:24:09	http://top4pics.com/IRS-Transcripts-062018-05/6/	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2018-06-07 14:08:03	http://top4pics.com/FILE/Emailing-S65496BD-03328/	Offline	heodo	JAMESWT_MHT
2018-06-06 19:58:03	http://top4pics.com/Inv-Documents/	Offline	doc emotet heodo	Cryptolaemus1
2018-06-01 19:12:40	http://top4pics.com/DOC/Pay-Invoice/	Offline	doc emotet heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2018-06-30 05:59:20	ea73652fbecb0539e46da02cb1ef6a9570f37548ad166d4c59af77bd3982bc08	doc	Heodo
2018-06-29 21:54:45	276e5e230766222ed208b1d4d1bd994acc2e763ca71c6d28f41a17988375d099	doc	Heodo
2018-06-27 14:05:31	ea73652fbecb0539e46da02cb1ef6a9570f37548ad166d4c59af77bd3982bc08	doc	Heodo
2018-06-15 20:07:02	f5e86722c4805df0eba25b8d85607fe0ea03422c9e60b5a4f6285b0027f03582	doc	Heodo
2018-06-15 14:58:46	10b4c1ae0adc1a115d3912e20347e928100ed65741b74d9430004405644c8864	doc	Heodo
2018-06-01 19:12:40	3803bfbce21fffcf67582832f8292d4e40e2417463b3040e293c1938179ef9c1	doc