URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: vplaw.vn
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-09-17 17:09:05 UTC
Total malware sites :1
A record(s) observed :3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 15:58:41 160.250.136.64Not listedAS135918 DVS-AS-VN- VNyes
2020-10-02 04:36:42 103.116.105.22Not listedAS135987 INDRA-RELOAD-AS-VN- VNno
2020-09-17 17:09:09 172.104.45.127172-104-45-127.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- SGno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-09-17 17:09:09https://vplaw.vn/wp-admin/LLC/HUKN0boxYdh0UUw/Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-09-17 18:09:5646cad0ffaf0d5f1f1d43c5f9a23e3d2dd1a3de391489a357e7e4627fd62bc6bedocHeodo
2020-09-17 17:43:30e8e0ee1f225b4a605c085d0a5261d9dfc0c633676b294f5f329881ff8c242540docHeodo
2020-09-17 17:31:0977b35ef953d16224dfb90e0c534ce30f48b16723738498a0cc61dcf274f4bcc9docHeodo
2020-09-17 17:09:087116b8982d2e5c63be2e3edf350d562b991314205feda61eb9c8d33cfd8ce0e4docHeodo