URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: www.bythesnap.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2018-06-28 23:05:17 UTC
Total malware sites :8
Online malware sites :0 (0%)
Offline Malware sites :8 (100%)
A record(s) observed :5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-10-03 06:58:59 103.131.51.4host.131.51.4.colo.co.idNot listedAS131775 IDNIC-JALANET-AS-ID- IDno
2019-07-22 05:26:38 103.102.0.44host.102.0.44.colo.co.idNot listedAS136851 IDNIC-COLO-AS-ID- IDno
2018-10-15 06:27:13 175.176.161.147golden.ardetamedia.comNot listedAS45287 VARNION-AS-ID- IDno
2018-07-09 12:31:08 175.176.161.124host.176.161.124.varnion.comNot listedAS45287 VARNION-AS-ID- IDno
2018-06-28 23:05:23 111.68.116.115Not listedAS45287 VARNION-AS-ID- IDno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2018-07-18 13:12:00http://www.bythesnap.com/doc/En/Payment-and-add...Offlinedoc emotet ext heodo ext Anonymous
2018-07-12 20:50:04http://www.bythesnap.com/8/Offlineandromeda emotet ext epoch2 heodo ext payload Cryptolaemus1
2018-07-11 10:52:04http://www.bythesnap.com/files/US_us/Jul2018/Pa...Offlinedoc emotet ext heodo ext ps66uk
2018-07-10 09:52:32http://www.bythesnap.com/Zahlungsschreiben/Offlinedoc emotet ext heodo ext Anonymous
2018-07-06 05:16:25http://www.bythesnap.com/google_cache/The-FOURT...Offlinedoc emotet ext heodo ext p5yb34m
2018-07-05 07:09:40http://www.bythesnap.com/Messages-2018/Offlinedoc emotet ext heodo ext Anonymous
2018-06-30 06:17:41http://www.bythesnap.com/Inv-Documents-JuneOfflineemotet ext heodo ext p5yb34m
2018-06-28 23:05:23http://www.bythesnap.com/Inv-Documents-June/Offlinedoc emotet ext heodo ext Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2018-07-10 18:07:363af191c8f9577b27d8f8756b4ef37cf76bd33adb01feec6ee737181f1e64e219doc Heodo
2018-07-10 16:07:3956c5ad2c64f884d2a9cca477b72bc154056d9e573ab1a4ec087fa466f7297bcedoc Heodo
2018-06-30 07:13:49027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6docHeodo
2018-06-30 07:11:02027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6docHeodo
2018-06-29 21:51:08276e5e230766222ed208b1d4d1bd994acc2e763ca71c6d28f41a17988375d099docHeodo