URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: www.amchealth.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-01-29 11:00:03 UTC
Total malware sites :1
A record(s) observed :3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-28 04:48:00 199.60.103.2Not listedAS209242 CLOUDFLARESPECTRUM- USyes
2025-04-28 04:48:00 199.60.103.254Not listedAS209242 CLOUDFLARESPECTRUM- USyes
2020-01-29 11:00:04 35.239.158.1515.158.239.35.bc.googleusercontent.comNot listedAS396982 GOOGLE-CLOUD-PLATFORM- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-01-29 11:00:04https://www.amchealth.com/wp-content/swift/0rqw...Offlinedoc emotet ext epoch2 heodo ext spamhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-01-29 15:04:45135e6e64bd7742b372ada6b825319eb55fa6081a563f2bb5b8c41b146badb7e9docHeodo
2020-01-29 14:58:3565ee81d9bed73cfc43cd9d9db07e7d24018402829c75452a675cefacb6941071doc  
2020-01-29 13:27:19fdd27ad5a187c7c1ffe8e2dbf00933f06e65b7e9e93fdd9320d0ea30517dc388doc Heodo
2020-01-29 11:00:04d13fb735bd62cbf27f5752fd2a885d62a9766cc2a4379b8b452ad630c996efecdoc Heodo