URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	37.1.213.59
Firstseen:	2026-07-08 22:01:05 UTC
Total malware sites :	4
Online malware sites :	0 (0%)
Offline Malware sites :	4 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-07-08 22:01:09	37.1.213.59		Not listed	AS29802 HVC-AS	US	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-07-08 22:02:08	http://37.1.213.59/y8jdGc5jS/Plugins/cred.dll	Offline	3c89c2 Amadey cred.dll dropped-by-amadey plugin	Bitsight
2026-07-08 22:02:07	http://37.1.213.59/y8jdGc5jS/Plugins/clip64.dll	Offline	3c89c2 Amadey clip64.dll dropped-by-amadey plugin	Bitsight
2026-07-08 22:01:09	http://37.1.213.59/y8jdGc5jS/Plugins/clip.dll	Offline	3c89c2 Amadey clip.dll dropped-by-amadey plugin	Bitsight
2026-07-08 22:01:09	http://37.1.213.59/y8jdGc5jS/Plugins/cred64.dll	Offline	3c89c2 Amadey cred64.dll dropped-by-amadey plugin	Bitsight

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2026-07-08 22:02:08	957b16d148a33a4e6412d675a9dd3b99a6af1b5dc606b663f05107d5d98956f0	dll	Amadey
2026-07-08 22:02:07	2b5fa9b9db15a70b3f902632459d1fec97dc834149dc2a0bd5e8e04c6c3f494b	dll	Amadey
2026-07-08 22:01:08	2b5fa9b9db15a70b3f902632459d1fec97dc834149dc2a0bd5e8e04c6c3f494b	dll	Amadey
2026-07-08 22:01:08	6b5bd7f56416955111cb628f19133dcbaeddd2e3d4c063bb709466cd5eeefd95	dll	Amadey