URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | vitaliberatatraining.com |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2018-11-27 17:13:03 UTC |
| Total malware sites : | 4 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 4 (100%) |
| A record(s) observed : | 39 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 19:45:01 | 15.197.148.33 | a2aa9ff50de748dbe.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | yes |
| 2025-04-27 19:45:01 | 3.33.130.190 | a2aa9ff50de748dbe.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2019-05-28 23:16:20 | 184.168.221.49 | 49.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-05-25 20:42:13 | 184.168.221.44 | 44.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-05-29 00:57:40 | 50.63.202.41 | 41.202.63.50.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-04-03 12:27:00 | 50.63.202.58 | 58.202.63.50.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-04-10 00:54:22 | 184.168.221.51 | 51.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-04-06 11:30:48 | 184.168.221.38 | 38.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2018-12-17 17:06:28 | 50.63.202.43 | 43.202.63.50.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2019-04-04 06:27:06 | 184.168.221.40 | 40.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2018-12-04 07:39:20 | http://vitaliberatatraining.com/files/DE/DOC-Do... | Offline | doc emotet  epoch2 heodo |  Cryptolaemus1 |
| 2018-12-04 00:34:01 | http://vitaliberatatraining.com/files/DE/DOC-Do... | Offline | emotet epoch2 heodo | Cryptolaemus1 |
| 2018-11-28 09:52:03 | http://vitaliberatatraining.com/w8INn1Y/ | Offline | emotet exe heodo |  abuse_ch |
| 2018-11-27 17:13:05 | http://vitaliberatatraining.com/w8INn1Y | Offline | emotet epoch2 exe heodo | Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-11-30 11:16:33 | fecfbf49ed287f62ef80add11715d3d3f5f875b363811d764016a10bcac8dbe0 | html | ||
| 2019-11-30 11:16:21 | a06e0b434057b57590d9f82de2d68d0fd3747f4027e6cfadcd204b06f40ef6b8 | html | ||
| 2019-11-30 11:15:21 | c53f140a9b9b2c58fb9721ad894816103339b99537bc7b65b6b2312b797e7c60 | html | ||
| 2019-11-30 11:15:16 | 196001ba5e7cf6577485bedaa7128479248bbd4998ca6bec076b6f1d86749961 | html |