URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-11-18 09:47:17 | 50.31.176.166 | priva-140.spindns.com | Not listed | AS23352 SERVERCENTRAL | US | yes |
| 2025-04-28 19:56:25 | 45.191.0.241 | server241-scl.tecnoweb.net | Not listed | AS64114 TECNOWEB_PERU_SAC | CL | no |
| 2018-09-18 23:43:43 | 107.180.51.19 | 19.51.180.107.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2018-09-08 10:33:04 | 184.168.221.60 | 60.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2018-09-06 09:59:20 | 50.63.202.59 | 59.202.63.50.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2018-09-06 06:53:39 | 184.168.221.57 | 57.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2018-09-11 00:14:35 | 184.168.221.37 | 37.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2018-09-06 06:43:36 | 184.168.221.49 | 49.221.168.184.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2018-07-21 23:56:56 | 50.63.202.45 | 45.202.63.50.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
| 2018-08-21 23:34:09 | 50.63.202.38 | 38.202.63.50.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2018-09-24 13:48:59 | http://www.manipura.cl/DOC/Rechnungsanschrift-k... | Offline | doc emotet | |
| 2018-06-18 18:31:34 | http://www.manipura.cl/ups.com/WebTracking/ZXV-... | Offline | emotet | |
| 2018-06-06 12:45:05 | http://www.manipura.cl/DOC/Rechnungsanschrift-k... | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2018-06-18 18:31:34 | a8ede5b4e9ad5f52a3c28142fa26a4c2caa2d9bd9e73aead41942d31986e4abe | doc | Heodo |
US
CL