URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: www.asaivam.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2018-06-26 20:11:04 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)
A record(s) observed :12

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 15:41:58 91.195.240.19Not listedAS47846 SEDO-AS- DEyes
2020-01-05 17:10:45 103.224.182.252lb-182-252.above.comSBL596527AS133618 TRELLIAN-AS-AP- USno
2019-09-28 06:14:31 154.95.167.144Not listedAS134175 SH2206-AP- HKno
2019-07-27 05:53:43 45.194.96.2Not listedAS138456 OCTL-AS-AP- MUno
2019-04-30 19:39:37 50.63.202.7474.202.63.50.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-05-02 02:46:02 184.168.221.8888.221.168.184.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-05-01 13:47:39 50.63.202.8989.202.63.50.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-05-01 07:42:26 50.63.202.7878.202.63.50.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2019-05-17 20:29:30 50.63.202.8484.202.63.50.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USno
2018-07-07 11:51:15 166.62.27.6363.27.62.166.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- SGno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2018-07-05 15:16:07http://www.asaivam.com/US/Client/Payment/Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1
2018-06-30 06:16:38http://www.asaivam.com/Abierto-Pasado-Vencimien...Offlineemotet ext heodo ext p5yb34m
2018-06-29 16:48:29http://www.asaivam.com/Order/ACCOUNT489445/Offlinedoc emotet ext heodo ext Anonymous
2018-06-28 19:38:05http://www.asaivam.com/Abierto-Pasado-Vencimien...Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1
2018-06-26 20:11:05http://www.asaivam.com/Gwlmc3fWUZ/Offlineemotet ext epoch1 heodo ext payload Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2018-06-30 07:21:58027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6docHeodo
2018-06-30 07:12:02027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6docHeodo
2018-06-29 21:54:42276e5e230766222ed208b1d4d1bd994acc2e763ca71c6d28f41a17988375d099docHeodo