URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.vergelijkeenproduct.nl
Domain registrar:	ZXCS
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-07 14:10:09 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-07 14:10:10	185.104.29.104	web0134.zxcs.nl	Not listed	AS206281 AS-ZXCS	NL	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-08 23:42:09	http://www.vergelijkeenproduct.nl/wp-admin/SN9X...	Offline	doc emotet epoch4 heodo	sugimu_sec
2021-12-07 14:10:10	http://www.vergelijkeenproduct.nl/wp-admin/Nc/	Offline	emotet epoch4 redir-appinstaller	sugimu_sec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-12-09 06:39:51	0d93a4f12d6e52dd86f8194dc522bdf7b6c4724898e929e12943c15cef4f3aa9	xlsm		Heodo
2021-12-09 02:51:07	27eb195a0ed6e64b5b3a50fd111ddd216fd6545a3b74891745c72970cad9035f	xlsm		Heodo
2021-12-09 02:18:22	72ddbbd658380e1eaca1deaf8a20ceaf53947f3f549ce84d05b3906cb13d04ee	xlsm		Heodo
2021-12-09 02:09:06	957f0fab563de48ae41da020061dc0090e02cf4eaf0b022344a742105a53be99	xlsm		Heodo
2021-12-09 01:25:42	9b73bff29b8d6a980f1250eef0616585203c83f679e6916ecd77fda273205d46	xlsm		Heodo
2021-12-09 01:05:59	8bd5b0b88997985de0e243eb068d6eef53fb8736dd2b7c3533f26fd49f7b021c	xlsm		Heodo
2021-12-09 00:44:01	f008cd221bbf64a6901e9e67baba0f4e5c28d6f0e30e06617c8555799ba3f17c	xlsm		Heodo
2021-12-09 00:29:52	47eb41ba61a62ac3714f2a4f994111c1e7954a2c79ab44eeb784863b2eb9c67e	xlsm		Heodo
2021-12-09 00:19:27	59f510c09d494784d0266b6f5c9963b2b47590db031468749c07714441bd480a	xlsm		Heodo
2021-12-08 23:42:09	a76e44b61d8fcb474212eea3b4ef2d4643b89e91ed0cd5f0fcafef0d507d7bf2	xlsm		Heodo
2021-12-07 15:42:44	d9d2eb708acc78c80da5fba89e8dd41875b54f5b90476ad86b1e8260ef89a822	html
2021-12-07 14:10:09	c7c8f66008df6b6cd74f26832e78cbd513a965e61db9d72838544cff2a6fbc2b	html