URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host wheenk.com.

Database Entry


Host:wheenk.com
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-12-04 14:26:42

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-12-06 12:04:4850.63.202.73ip-50-63-202-73.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-12-06 10:58:3850.63.202.92ip-50-63-202-92.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-12-04 14:26:44166.62.97.38ip-166-62-97-38.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-12-05 06:30:57http://wheenk.com/Dec2018/EN_en/Invoices-attached/Offlinedoc emotet epoch2 heodo Clean@Cryptolaemus1
2018-12-04 14:26:44http://wheenk.com/Dec2018/EN_en/Invoices-attachedOfflinedoc emotet heodo CleanAnonymous