URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2020-01-29 17:50:06 | 85.95.248.195 | cpsrv8.aktasweb.com | Not listed | AS49467 EUROTA-ASN | TR | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-01-29 17:50:06 | http://www.kesaninsesi.xyz/wp-content/Document/ | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-01-30 19:03:59 | 1b5d6a9fe7a562d4d940efb272ceb962dda14a0cb672a089fe2a0ed20585c0a0 | doc | Heodo | |
| 2020-01-30 18:28:58 | bfb07402a9c2d9bc220ccce8b230e81d4fc183715599b2aae3a17dfa3d9e8419 | doc | Heodo | |
| 2020-01-30 17:45:36 | 3476381f8a76d5131391144afc9072ad6ffb33c7cdd6aeeb721600c5743992e0 | docx | ||
| 2020-01-30 16:35:19 | cc7d8ba3bc76b203da5c3994f672d0a3d03d98fcf9e5a8913db8535608bb7f9f | docx | ||
| 2020-01-30 15:38:41 | fc4795a525d4df396dfa2b3deee5b2541896310b2194e4093433fdc77e391a50 | docx | ||
| 2020-01-30 15:03:32 | 72632cbb5a52904f9f0b8d201344958a9668ef1f52518be67520555eab7d0660 | docx | Heodo | |
| 2020-01-30 13:49:53 | 6503eeb82c3bc74d74c8bd056d2737b539afd23333ae2f25ec18b2ba72a6c567 | doc | Heodo | |
| 2020-01-30 12:22:24 | 0e8bf4227a4711a00bdef9eecc715129b94f89647c1606b0826974f91b00c90b | docx | Heodo | |
| 2020-01-29 17:50:06 | 135e6e64bd7742b372ada6b825319eb55fa6081a563f2bb5b8c41b146badb7e9 | doc | Heodo |
TR