URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-08-02 07:29:04	2.59.254.18		Not listed	AS207083 HostSlim-Global-Network	BG	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-08-23 05:14:06	http://2.59.254.18/_errorpages/hueyzx.exe	Offline	exe Formbook	abuse_ch
2023-08-17 04:05:06	http://2.59.254.18/_errorpages/ghostzx.doc	Offline	doc Formbook	abuse_ch
2023-08-17 04:04:05	http://2.59.254.18/_errorpages/ghostzx.exe	Offline	exe Formbook	abuse_ch
2023-08-15 11:59:04	http://2.59.254.18/_errorpages/yugozx.exe	Offline	AgentTesla exe	abuse_ch
2023-08-12 07:11:06	http://2.59.254.18/_errorpages/ikmerozx.exe	Offline	exe	abuse_ch
2023-08-12 04:36:06	http://2.59.254.18/_errorpages/isbinzx.exe	Offline	64 exe	zbetcheckin
2023-08-12 04:27:04	http://2.59.254.18/_errorpages/ikmerozx.doc	Offline	RTF	zbetcheckin
2023-08-10 19:30:09	http://2.59.254.18/_errorpages/stanzx.exe	Offline	AgentTesla	James_inthe_box
2023-08-09 09:27:05	http://2.59.254.18/_errorpages/damianozx.exe	Offline	AgentTesla exe opendir	abuse_ch
2023-08-09 09:06:06	http://2.59.254.18/_errorpages/logszx.exe	Offline	32 AgentTesla exe	zbetcheckin
2023-08-09 07:34:06	http://2.59.254.18/_errorpages/smokeyzx.exe	Offline	32 AgentTesla exe	zbetcheckin
2023-08-09 07:34:05	http://2.59.254.18/_errorpages/kellyzx.exe	Offline	32 exe Loki	zbetcheckin
2023-08-09 07:02:06	http://2.59.254.18/_errorpages/alertzx.exe	Offline	AgentTesla exe opendir	abuse_ch
2023-08-09 06:00:08	http://2.59.254.18/_errorpages/alertzx.doc	Offline	AgentTesla RTF	zbetcheckin
2023-08-09 05:55:06	http://2.59.254.18/_errorpages/damianozx.doc	Offline	AgentTesla RTF	zbetcheckin
2023-08-09 05:09:04	http://2.59.254.18/_errorpages/kellyzx.doc	Offline	Loki RTF	zbetcheckin
2023-08-08 13:08:05	http://2.59.254.18/_errorpages/checkzx.exe	Offline	Loki lokibot	James_inthe_box
2023-08-07 10:43:04	http://2.59.254.18/_errorpages/logszx.doc	Offline	AgentTesla	Anonymous
2023-08-06 08:45:07	http://2.59.254.18/_errorpages/Rendestene.exe	Offline	exe GuLoader	abuse_ch
2023-08-06 04:22:07	http://2.59.254.18/_errorpages/Rendestene.doc	Offline	GuLoader RTF	zbetcheckin
2023-08-04 07:08:03	http://2.59.254.18/_errorpages/bullionzx.doc	Offline	RedLineStealer RTF	zbetcheckin
2023-08-04 04:01:09	http://2.59.254.18/_errorpages/crypted.exe	Offline	32 exe Loki	zbetcheckin
2023-08-04 03:56:04	http://2.59.254.18/_errorpages/bullionzx.exe	Offline	32 exe RedLineStealer	zbetcheckin
2023-08-04 03:47:05	http://2.59.254.18/_errorpages/owenzx.exe	Offline	exe Formbook opendir	abuse_ch
2023-08-03 06:56:04	http://2.59.254.18/_errorpages/defounderzx.exe	Offline	exe Formbook	abuse_ch
2023-08-03 06:55:07	http://2.59.254.18/_errorpages/ohoyeczx.exe	Offline	AveMariaRAT exe rat	abuse_ch
2023-08-03 06:38:03	http://2.59.254.18/_errorpages/ohoyeczx.doc	Offline	AveMariaRAT RTF	zbetcheckin
2023-08-03 05:56:05	http://2.59.254.18/_errorpages/defounderzx.doc	Offline	Formbook RTF	zbetcheckin
2023-08-03 05:51:05	http://2.59.254.18/_errorpages/plugmanzx.exe	Offline	32 exe RemcosRAT	zbetcheckin
2023-08-02 12:30:09	http://2.59.254.18/_errorpages/pablozx.exe	Offline	AveMariaRAT exe rat	abuse_ch
2023-08-02 12:30:09	http://2.59.254.18/_errorpages/pablozx.doc	Offline	AveMariaRAT doc rat	abuse_ch
2023-08-02 08:52:05	http://2.59.254.18/_errorpages/lawzx.exe	Offline	AgentTesla exe Formbook	abuse_ch
2023-08-02 08:52:03	http://2.59.254.18/_errorpages/lawzx.doc	Offline	AgentTesla doc Formbook	abuse_ch
2023-08-02 07:33:13	http://2.59.254.18/_errorpages/obizx.exe	Offline	AgentTesla Formbook	JAMESWT
2023-08-02 07:33:05	http://2.59.254.18/_errorpages/obizx.doc	Offline	Formbook	JAMESWT
2023-08-02 07:29:19	http://2.59.254.18/_errorpages/texaszx.exe	Offline	AgentTesla exe	abuse_ch
2023-08-02 07:29:04	http://2.59.254.18/_errorpages/texaszx.doc	Offline	AgentTesla doc	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-08-23 05:14:06	ed332a896cc71afb913bed903fa5259149985d3d3659487f4dc876293e0f7a03	exe		Formbook
2023-08-23 01:10:33	0c1b29d6a3e60d8123578238430934ac886d91e49c0d144c4dfe0bc0417daa63	exe		Formbook
2023-08-23 00:53:23	72920d0750ff04366c31aa901e5dd14ba54ab52ff4859fda2d8d66b4a7ec65c6	exe
2023-08-22 17:56:33	e514601779855b8797844efa8382cc84701a00615d5b2eaf8183780859140939	exe
2023-08-22 17:27:42	066130834dd854e88a80289bf0e92197bcf75248cd004fbdb221a74fb1910d3d	exe
2023-08-22 11:30:24	983a10a541a2e57e2640e77ad37e7ac4eff7286c1617e8ccc08db98418e00d6e	exe		Formbook
2023-08-22 11:04:17	2fe8eab70a35d4a9846f15b24cbc32a07df75f246f6a699fdd53159e8453fcdd	exe		AgentTesla
2023-08-22 10:47:48	1cf62ca473de898e9c5498f121b876a0d8fa69fda25d9e586a17f695a1a16c6f	exe
2023-08-22 00:53:42	eac185bd1520eb8f6b6ff62d571549c5d073cd120e22119499c26e8515f0352e	exe		Formbook
2023-08-22 00:47:59	6ccc7dd1538501f96244141ce239ccb239415beb46eaabd3ab03aef0b299b75f	exe		AgentTesla
2023-08-22 00:46:11	9c098c309834e20487cfcfa3ed000b798928a5bea0335de5d1ed0f3e772927c9	exe
2023-08-21 17:41:04	f6e3fd97082eec8433f618fdeab9af4b19999c9792dfc72b15cdbf4d87f2c279	exe		AgentTesla
2023-08-21 16:58:50	685b1a50bed0764f3d217be21183211db5b54517bb64b8e85b1bf83da98f21b1	exe		AgentTesla
2023-08-21 09:53:16	217a04102c6021e98815a35feab526e99a259f01c9baee3e143288dbc160b920	exe		AgentTesla
2023-08-21 02:52:22	a243d77faada9bc0e92165cfb7794a7da3a62c19b0c89f03a00b8c18b7f308f7	exe
2023-08-21 01:27:01	c64bc02b5836c20524a6c7f2bece244250500730f4d3e182c15f2d85a52a4cec	exe
2023-08-20 19:21:25	873affaacad199fcc1687b9d8e39d75707123ed4ce38181da37e093b624832da	exe		AgentTesla
2023-08-20 18:36:00	aeef012a92829a9b258346f07cbcfc0dd4cf2840de7e95ebd69c09daa61b3806	exe		AgentTesla
2023-08-20 18:20:00	2f6ac7e19e69b8c29b1de9205fd6b839944722341616c447092b7df288bbb045	exe		AgentTesla
2023-08-18 13:09:50	80dd6624e723c71bda0bb04573a1e96662184bd5dbef76c824c884df8afa2e15	exe		AgentTesla
2023-08-18 10:10:28	e7c6065d235655ee2fa7871ee73a8d14b4f88b87351de7752a4c9569739b667d	exe		Formbook
2023-08-18 09:21:54	04f9b267f0ce81017f3305ab8fbf4e1295336389cf7ec742ca1f8dcb4831cb02	exe		Formbook
2023-08-18 08:39:41	ad79217dc98d23b4c3e99fe39b7a554671c5d13b2ea29a2013f8f86b2d904a07	exe		AgentTesla
2023-08-18 08:25:29	87d39d5402d42c8e11f2013a362903be50510e85daca217160e3f9eee677a9d5	exe		AgentTesla
2023-08-18 02:30:04	00d519c4aa56b27c8254ff7721e8dc31f9c3746afcced9380b3e6c532e0dc38e	exe		AgentTesla
2023-08-18 01:46:37	d441487af7e29ca8436cd75f0facc50100631560393c64d21429164f054b70c0	exe		AgentTesla
2023-08-17 04:05:06	8eb67d4db341e3c1a2494e6cd111add9599850f62f65818dfd9f8f45aa49d257	rtf		Formbook
2023-08-17 04:04:05	8316df0c425a49849eaf0c55fac307ea3ac82efa3a83b3ea786fd63e8b38b909	exe		Formbook
2023-08-17 01:59:20	c57dc032205e3bcbf86a8dc6053377976c6acc015a837fdb1c30f6ec8d37ab01	exe		Formbook
2023-08-17 01:53:53	d99dfd92b5c40e3bceb1e79f0f8628f9b872d18062a7ff1e97cb395af0c9b381	rtf		Formbook
2023-08-17 01:50:41	29e9fcdaf070133121d5a2d5dcb5f4a4a25892e21c60e1d29a497ddaa8d54ea9	exe		AgentTesla
2023-08-17 01:50:35	940387888527e0efd604a126935a6174423ce34d15dc1fd7b7c894b78985ad71	rtf		Formbook
2023-08-17 01:10:15	781517d23af59280628d63e2f4bd0e34300ee94b8b6d353547b797e59b899edb	exe		Formbook
2023-08-16 15:16:53	aed4ca29e0127320a814f0051b444338d8078cd79ee176c9db4a14c989dbf0c3	exe		AgentTesla
2023-08-16 15:16:47	d1f88ae528bf7f14d38e798f0f8b4b2803ab815217625130df8343461dee9894	exe		Formbook
2023-08-16 15:14:23	d26cfee8c2154130e5d6ff92e3c9a6a61259b25551894fa2d14326874d6da24e	exe		AgentTesla
2023-08-16 14:28:26	f3c2f3594817df1307afd458a0328ccff1e63683ef86a6d176ca41bda9e3a14f	rtf		Formbook
2023-08-16 14:26:31	beb77b8e0cb4c171b691a90b4b60c80bc715793a5dedf3b97375d6d760f414d6	exe		AgentTesla
2023-08-16 10:36:45	b3eefb7225c8437ba7e9c6800ffdc0f2bb42225246bc7cc4944ba343b40459dc	exe		AgentTesla
2023-08-16 10:04:29	a0755b595474643bf1200cb8b3a9038f53d685b6caff8c82acf3ed344fa22da3	exe		Formbook
2023-08-16 10:04:01	d5c838bad4a67a31d6d4dfdddb394ee475af925ac9df985995eae5de8429b991	rtf		Formbook
2023-08-16 02:59:19	5ac0d32f2c164f00048bf818f43ed4160be02cc98ec66c810d043fc77fc70929	exe		Formbook
2023-08-16 02:27:38	3445cded48ec36b32cc7d8e5190e3d986063408a5d70bbfe507d5e3ba9dc6ba3	exe		Formbook
2023-08-15 17:31:07	647b53eee8836897331690f3f9767826434802cc5ce9144668c7c23c3c6beb36	exe		Formbook
2023-08-15 16:15:08	f9de5be5d337c16f6a3ad525011586ae0b14f04169e9b6ae61a35397a3311079	exe		Formbook
2023-08-15 11:59:04	d88ca1dd2194d68703b49f6aeb18e8d2a08132d5f348b9d0cfaa96b90a87384d	exe		AgentTesla
2023-08-15 06:39:06	126e048eed0b55d00c200460122394c059ad7e7fda97b0d52a97d478aa7b0998	exe		Formbook
2023-08-15 03:56:45	1768eeca3dbf15b17955ec2e16702f1d3b39f79420e2c218c5f53019d85680cf	rtf		AgentTesla
2023-08-15 03:55:56	de361195aca3d3d04494a26d2023ecdc0bf09cf56f379813d19b2c256ee18df8	exe		Formbook
2023-08-15 03:23:47	3ba3a8e73d48a132f63802324e31098024a16b19fa4669aa04589bdb12382f5a	exe		AgentTesla
2023-08-14 18:15:11	79760a303d924139c197bd8cb810d63f93d4fc62cd2858dda1e33a1b3b54f197	rtf		Formbook
2023-08-14 17:49:10	681b4fb5d374583fa961ba8ad171585c0ba9d2e346c5fbb6fce92392a10a2d16	exe		Formbook
2023-08-14 16:41:52	c939e913342c14722c46909cd0432823bf0dc2fe1f663dba7a812ef61e16dc92	exe		AgentTesla
2023-08-14 04:36:20	7ced14d03839326a40ed0e78a6adf505bf8a29a09f0f692dc9e7d40b2ad15e8d	exe		AveMariaRAT
2023-08-14 02:54:16	5976276fb72cd6fca6b74ef6480cdfb439a14b8c52ab9e442b0ee85c130a5f08	exe		Formbook
2023-08-14 02:50:56	1d8b6b8d9edc7442f293f31f633e9e3701a91fcae93bd4b5f3468c6f6595fd4c	rtf		Formbook
2023-08-14 02:38:18	2f2238ba20cda49017c3d861729bbcde2143576afab80b5a2e4b3476bd2ca1fc	exe		AgentTesla
2023-08-14 02:37:27	13d7c3e00c41017615b7aa10cb44ceb52af91a80380bcf65cbeb4dc9edcc6d25	rtf		AgentTesla
2023-08-12 07:11:06	30175a4cdae27076cabcb5eb7106779cadc47113ef17a7b67d0e02aa840072e0	exe
2023-08-12 04:36:06	4412a658ff8b5e5c1048703b9307e62e7565834d1eaa5e0ad8db96ee72f9b162	exe
2023-08-12 04:27:04	cefe011ba17f61e159dabb3d5863c9b1f00571790028e40d443100e1c04c0ab6	rtf
2023-08-11 12:29:27	9da5b7337f022a122afdd84c2744861da80dd7575f24c9a6abf9b00b2a0d2870	exe		AgentTesla
2023-08-11 12:10:51	a456a0fcdedef851458b225f6bae02f6ee4e9ff6e1d479376d3766497aea8ac2	exe		Formbook
2023-08-11 11:44:18	d085497cb6b122fc1ba456aff7becbc74bf8b4f9c2bc895932821a60a4536cb2	exe		AgentTesla
2023-08-11 11:10:51	26cae4cdeef032aea2bd4ea1c5b88fbfb876bb3dd35a54076356195969fe3611	exe		RemcosRAT
2023-08-11 10:55:55	651a4c3e35b647788a3eb33862d90bc7d58912e6e99ffb8a7bd4c759634fe67b	exe		Formbook
2023-08-11 07:26:49	2dd6ce65ea7d7e9e7ec4a5e52bcf41bd327e418c23f3851bea856d9490852e2a	exe		AgentTesla
2023-08-11 07:09:54	120efb48724487028465fb5d25db17b9398f56bad7116e54299ab5087104e69b	exe		Formbook
2023-08-11 05:39:49	2f77d3d54d53abf393f64e11d858760760953897f4d10025cc4816b9b8b87e6d	exe		Formbook
2023-08-11 04:15:31	8d74e5f4fa53da933efbc31235e2b21df9dc1f4aec1eddcdb3f986cdf1932d4a	exe		AgentTesla
2023-08-10 19:30:09	7f05f950858cd8ca08ed3841cb0bc540ee3d88c6ce3a360a89d42ffa7ce0ff2b	exe		AgentTesla
2023-08-10 17:01:01	3f3d909a0b48ceadaf0b0d0d4afd89adeceb8eae53a112c57117e378bcda136e	exe		Formbook
2023-08-10 15:58:02	9d0a05a5f2cd9f4ab18c167ee94b33669992d74140a0d334e84eb1b2efd4e313	exe		Formbook
2023-08-10 15:53:56	3d05b9869dcf10fe7eba50fac1e81427d2699b5514ccf06b497830aef6b59c5b	rtf		Formbook
2023-08-10 12:09:03	adfa401cdfaac06df0e529bc9d54b74cea9a28d4266a49edafa5b8e04e3b3594	exe		AgentTesla
2023-08-10 11:45:46	bbd52311d6f6fcc5e1c1296fb53932cac1445ed4d3fe3872a2a8de1f83bd1bf0	exe		Formbook
2023-08-10 10:28:26	ca290a08560360e9090ea83a3f3916fd3db3d0c058bc7aa0ce349e8783b3ab23	exe		Formbook
2023-08-10 07:13:23	168e72097cea76b8d996b129c02d7a1d9825f72ecb193317d5f5ab08fef5540b	exe		Formbook
2023-08-10 05:39:50	a130859fe78063bd4167573fa4946db231d1f45a95fd2efd31848fe5787a3530	exe		AgentTesla
2023-08-10 05:14:40	5aebac92125547ec3d79dac08bf20e1a990758cf2bace37672dca5adfe509aab	rtf		AgentTesla
2023-08-10 03:39:08	4246ac35e29b03cf4057457231abf222b88bf64cd65b59d7dc79d35b1953372b	exe		Formbook
2023-08-10 02:39:30	57e5c265d656679c7c2ac2b0a255264a6a8dc01cf5205964afed49709f38560f	rtf		AgentTesla
2023-08-10 02:38:59	a16bbcd964ae89f1cae59ed66c22f1009830c91db528215972952d97433bfb71	exe		Formbook
2023-08-09 18:01:57	d6157b6de3c5fa996df4dec819507e7534787878bcace12405b1874d085bb602	exe		Loki
2023-08-09 17:55:13	c64d5d0de4f44877c82a0481a6a71e9b2ab91acb1f960c50d366ac532eee7458	exe		AgentTesla
2023-08-09 17:52:11	e900e880ce3272ce750db05a3428dad9c354116d22cd125c374708cfd9aa0fa2	exe		AgentTesla
2023-08-09 17:47:46	d38a6a6faeecb0d30b8d9a8d857e850f1f125dc1cfbe497899bd52695498bef5	exe		Formbook
2023-08-09 17:35:54	1eba4559ea8e4c4a53804b0258ff3be6082861bd6f9b4b33876c4cb8bba5e407	exe		AgentTesla
2023-08-09 17:17:17	eb3bdf2cff8b5de8c911726f07eed2aa77a39ae01b21c0dd33aeab333a2be512	exe		Formbook
2023-08-09 17:11:33	0fe9312c5237b767dc07de6296a5a7aaf8b7c7ec4540f1c65f158aba5079a283	exe		RemcosRAT
2023-08-09 17:04:48	344461b75267cd218101263f89187a2b1ab88db9391bcb9efb6e3fc9b871fb39	exe		AgentTesla
2023-08-09 12:34:28	fa278261af3ab337d468f32853cbf7dc6f13bb529684f45d92a2069ee21318b4	exe		Formbook
2023-08-09 12:18:31	545d40ade3522c1e3e361746d2575d0713ceb992658cb30cbca4d0cdc824e6e9	rtf		Formbook
2023-08-09 09:27:05	a53b6e198a7acfa16c86f39d607493cece30246a4c4195663a52eb80e3fd1820	exe		AgentTesla
2023-08-09 09:06:06	4fcc49b2eefbff7e79c4ff61b3891f766b8530a75e0a748fd66ffc67911cf377	exe		AgentTesla
2023-08-09 07:34:06	d94631983f4b432da3c6ad46185145e0e90ac651c39d07d44bf0eafbd7509b7f	exe		AgentTesla
2023-08-09 07:34:05	7912ad331ddb4d17c37ee3cdc2c5a1d4142c11a07f60f4633f8df706aeed986a	exe		Loki
2023-08-09 07:02:06	fabbc9025f69a3acca316e85321c79bf83901f320a03d1efbd864037f5c7085d	exe		AgentTesla
2023-08-09 07:00:41	48bc303529276d86909f2523bec585d5a7bf257f377aaef3f57dc6279a57e415	rtf		AgentTesla
2023-08-09 06:08:53	57fb4bbec8340a3da56629716ef3716fa14a247aeef941bf37c052a815c1afc6	exe		AgentTesla