URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2020-01-17 14:38:34 | 208.91.197.46 | Not listed | AS40034 CONFLUENCE-NETWORK-INC | VG | no | |
| 2019-01-15 21:44:01 | 204.11.56.48 | SBL494567 | AS40034 CONFLUENCE-NETWORK-INC | VG | no | |
| 2019-01-14 21:32:37 | 209.99.64.18 | 209-99-64-18.fwd.datafoundry.com | Not listed | AS23005 SWITCH-LTD | US | no |
| 2018-11-09 09:56:50 | 216.239.32.21 | any-in-2015.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2018-11-09 09:56:50 | 216.239.34.21 | any-in-2215.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2018-11-09 09:56:50 | 216.239.36.21 | any-in-2415.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2018-11-09 09:56:50 | 216.239.38.21 | any-in-2615.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2018-06-26 16:54:18 | 74.208.223.11 | u15426246.onlinehome-server.com | Not listed | AS8560 IONOS-AS | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2018-07-11 03:58:20 | http://ultimatelegacyproductions.com/Bestellungen/ | Offline | doc emotet | |
| 2018-06-30 06:13:30 | http://ultimatelegacyproductions.com/Payment-an... | Offline | emotet | |
| 2018-06-30 06:13:28 | http://ultimatelegacyproductions.com/Invoice-06... | Offline | emotet | |
| 2018-06-28 23:04:23 | http://ultimatelegacyproductions.com/Invoice-06... | Offline | doc emotet | Anonymous |
| 2018-06-26 16:54:18 | http://ultimatelegacyproductions.com/Payment-an... | Offline | doc emotet | Anonymous |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-11-30 10:11:00 | 4c7d08f1d6fac569c83fa87b42a3a727668da55317954637ce500d59e058fe03 | html | ||
| 2019-11-30 10:09:15 | 4c7d08f1d6fac569c83fa87b42a3a727668da55317954637ce500d59e058fe03 | html | ||
| 2019-11-30 10:09:15 | 4c7d08f1d6fac569c83fa87b42a3a727668da55317954637ce500d59e058fe03 | html | ||
| 2019-11-30 10:08:46 | 8cf065293ca696f2560a8dde153a0ddd3144a32a9c3f10a82caf58d6e0b64c3c | html | ||
| 2019-11-30 10:08:13 | b5378a12e359a27a0c92f53fefa2b4c21673781b7e76f54495d58ad72a927839 | html | ||
| 2018-06-30 08:34:18 | 027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6 | doc | Heodo | |
| 2018-06-30 07:14:28 | 027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6 | doc | Heodo | |
| 2018-06-29 21:51:53 | 276e5e230766222ed208b1d4d1bd994acc2e763ca71c6d28f41a17988375d099 | doc | Heodo | |
| 2018-06-27 14:10:49 | ea73652fbecb0539e46da02cb1ef6a9570f37548ad166d4c59af77bd3982bc08 | doc | Heodo |
VG
US