URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: yomamaexdee.000webhostapp.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2021-06-23 23:53:03 UTC
Total malware sites :1
A record(s) observed :208

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-03-13 20:29:00 145.14.144.65Not listedAS47583 AS-HOSTINGER- BRno
2021-12-29 00:23:39 145.14.144.196Not listedAS47583 AS-HOSTINGER- BRno
2021-07-27 15:03:21 145.14.145.6Not listedAS47583 AS-HOSTINGER- BRno
2021-07-26 22:03:14 145.14.144.29Not listedAS47583 AS-HOSTINGER- BRno
2021-11-22 22:09:05 145.14.145.178Not listedAS47583 AS-HOSTINGER- BRno
2021-06-30 12:21:50 145.14.145.143Not listedAS47583 AS-HOSTINGER- BRno
2021-07-19 21:00:58 145.14.145.40Not listedAS47583 AS-HOSTINGER- BRno
2022-01-22 03:29:38 145.14.144.191Not listedAS47583 AS-HOSTINGER- BRno
2021-06-24 00:48:38 145.14.145.147Not listedAS47583 AS-HOSTINGER- BRno
2021-12-07 20:17:53 145.14.145.69Not listedAS47583 AS-HOSTINGER- BRno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-06-23 23:53:04http://yomamaexdee.000webhostapp.com/token.lolOffline32 exe RedLineStealer ext zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-06-23 23:53:0429619cd4f389eaacf1a243f3c7983506d889805645b7ba3d36ff6e3fcbb5868aexeRedLineStealer