URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-10-29 19:48:15 | 185.53.178.99 | Not listed | AS61969 TEAMINTERNET-AS |  DE | yes | |
| 2025-08-12 23:23:39 | 99.83.175.80 | a2e6b661ca0e4c4c4.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | no |
| 2025-04-27 10:35:45 | 15.197.240.20 | acf3b736b777428f5.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2019-03-07 18:28:15 | 198.89.123.132 | walyjewelry.i-waly.com | Not listed | AS13332 HYPEENT-SJ | US | no |
| 2019-08-14 07:34:39 | 91.195.240.117 | Not listed | AS47846 SEDO-AS | DE | no | |
| 2025-10-30 02:44:40 | 104.247.81.99 | Not listed | AS206834 TEAMINTERNET-CA-AS |  CA | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2019-04-12 21:57:02 | http://walycorp.com/logsite/EJJAV-obke85q8HWnzv... | Offline | doc emotet  epoch1 heodo |  Cryptolaemus1 |
| 2019-04-10 21:30:49 | http://walycorp.com/logsite/oPTNI-u4P09PW9baWrY... | Offline | doc emotet epoch1 heodo | Cryptolaemus1 |
| 2019-03-07 18:28:15 | http://walycorp.com/logsite/csnm9-h2651-rqsfu.v... | Offline | emotet heodo |  spamhaus |
The table below shows recent payloads delivery by this host.