URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: www.aaaca.co
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2018-06-29 23:56:45 UTC
Total malware sites :3
Online malware sites :0 (0%)
Offline Malware sites :3 (100%)
A record(s) observed :43

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-01-10 06:19:14 100.24.217.227ec2-100-24-217-227.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2020-01-10 06:19:14 107.21.8.112ec2-107-21-8-112.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2020-01-10 06:19:14 34.192.117.123ec2-34-192-117-123.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2020-01-03 09:26:12 3.93.124.54ec2-3-93-124-54.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2020-01-18 05:58:11 52.203.21.109ec2-52-203-21-109.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2020-01-18 05:58:11 52.20.152.70ec2-52-20-152-70.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2020-01-18 05:58:11 18.233.73.87ec2-18-233-73-87.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2020-01-18 05:58:11 3.209.21.137ec2-3-209-21-137.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2020-01-08 09:05:38 34.195.145.145ec2-34-195-145-145.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2020-01-08 09:05:38 54.83.91.42ec2-54-83-91-42.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2018-07-05 08:06:36http://www.aaaca.co/RECHNUNG/Bezahlen-Sie-die-R...Offlinedoc emotet ext heodo ext p5yb34m
2018-07-03 17:10:38http://www.aaaca.co/Zahlungserinnerung/Rechnung...Offlinedoc emotet ext heodo ext Anonymous
2018-06-29 23:57:02http://www.aaaca.co/Pasado-Due-Facturas/Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2018-06-30 08:34:43027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6docHeodo