URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-11-19 06:58:06	91.92.246.47		Not listed	AS203410 COLOBIX	BG	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-12-03 16:15:10	http://91.92.246.47/kjox.exe	Offline	AgentTesla exe	abuse_ch
2023-12-03 12:55:11	http://91.92.246.47/simoogn.txt	Offline	AgentTesla	abus3reports
2023-12-03 12:55:10	http://91.92.246.47/4ygvd.txt	Offline	AgentTesla	abus3reports
2023-12-03 12:55:07	http://91.92.246.47/simiz.js	Offline	AgentTesla	abus3reports
2023-12-01 09:23:05	http://91.92.246.47/idew.js	Offline	AgentTesla ascii	abuse_ch
2023-11-30 09:50:07	http://91.92.246.47/jnatuT.js	Offline	js	abuse_ch
2023-11-30 09:49:05	http://91.92.246.47/nigxo.js	Offline	js	abuse_ch
2023-11-27 11:27:05	http://91.92.246.47/afriq.js	Offline	AgentTesla	abuse_ch
2023-11-27 06:54:05	http://91.92.246.47/wxing.js	Offline	AgentTesla js	abuse_ch
2023-11-27 06:54:05	http://91.92.246.47/4satry.js	Offline	AgentTesla ascii js	abuse_ch
2023-11-27 06:51:06	http://91.92.246.47/3tuvq.js	Offline	AgentTesla ascii js	abuse_ch
2023-11-19 06:58:06	http://91.92.246.47/afkjox.txt	Offline	AgentTesla ascii Encoded	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-12-04 08:18:52	e90908743d65dab58865b9019ed88ab9b61b33d691f13960ed4f51fb09b40238	unknown
2023-12-04 08:10:33	7a3cdc80acd4828c9a978cc4f7ff9b5f79895c39e85f29c97d8dc158ec897007	unknown
2023-12-04 08:09:34	adfa25ebfb43642c0e034273bcda5e64ba2e6f143ca113cba0d8d3fdeb1ccf7e	unknown
2023-12-03 16:15:10	18ff7446c538ea6c96f148a12b2a214f9823d7e4061c2f3d350cd81e6a8de8c5	exe		AgentTesla
2023-12-03 12:55:11	58b9ab1353650ba3bb2daa10ab6f727fac1831e2a6b28440ebd696ca737fa9c3	txt		AgentTesla
2023-12-03 12:55:10	ff38e8ad0c61c38881cea12d0a028e14ca9e907c06d97993b801f5e3afa599fa	txt		AgentTesla
2023-12-03 12:55:07	696c0bd662e49bdba3a2491286ca18522cf681e5c38458e692a6da68906295af	unknown
2023-12-01 09:23:05	a0c15760671b70b87efca7052ef48fb36f702bc97d4236c0a0f904b8f6547386	unknown
2023-12-01 07:06:10	c74b4a057f10996a1bbfdda6ddc87283e7202a1e3f8ac4c563e110b793564def	unknown
2023-12-01 06:52:21	c515cd35cb018485608115d2f6357e06c90fc169fef2f71fb9a1c21c7a9c2c6e	unknown
2023-12-01 06:48:24	8b081204158fd05c592b011f00c51be075eeafb4cb92bf2c8f4e773519a27ea4	unknown
2023-11-30 09:50:07	31945b24ae3b59e4b7cc7da85d63f11eb5b59b67f901c4aec2947e0c35498bea	unknown
2023-11-30 09:49:05	130b96ddb5c23bb88249f014928a46809aa0a6d2e7c66a90f7a9f5d60c1de0b2	unknown
2023-11-29 14:11:04	7eac15326f74d5d01d5e5b8f6f9d37b201cab9b34c8e3b81c95f49be96b50436	unknown
2023-11-29 13:56:40	f1a6ec983635a0843830fa27c89021a9c7ce8531629bb600521879c196f52b3a	unknown
2023-11-27 11:27:05	f4dc8b79421aa0047b5475ff67f1e357f329bc19d9165d23d3aee4a49e96c87f	unknown
2023-11-27 09:57:35	59af2921c60ac2a2019c4906929a63cf815b2decbc1dca744b3ee365325f431d	unknown
2023-11-27 09:54:40	3b15e80745d77ea0978adab892616ef94a6a28954c50864742a79b10ea2e850a	unknown
2023-11-27 06:54:05	cba2aead157862b248d2415432df76c6859c95fe1e4aa6208a30f670963b3b7b	unknown
2023-11-27 06:54:05	27f3ae678150a420f59f342a54d31196c16982dc101b4c346857147e66b954d7	unknown
2023-11-27 06:51:06	5f57cbb48d911fda81730edc42b0c674a7837fd5420662591ae42ae3ad52c35d	unknown
2023-11-19 06:58:06	a9d6ef9be953a4b1cea43611c15eab7f654237ae2e43839aa542f71510dd5642	txt		AgentTesla