URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-05-08 10:13:09	122.201.80.143	whois01.turboservers.com.au	Not listed	AS38719 DREAMSCAPE-AS-AP	AU	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-02-22 09:55:09	https://aaacityremovalist.com/yw/009/10/000/101...	Offline	AgentTesla exe	zbetcheckin
2020-07-29 07:42:07	https://aaacityremovalist.com/pdf/cn/163/foxmai...	Offline	AgentTesla exe	zbetcheckin
2020-07-17 06:15:10	https://aaacityremovalist.com/INV00392.exe	Offline	exe NetWire	spamhaus
2020-05-13 05:08:03	https://aaacityremovalist.com/INV004-2838740.exe	Offline	AgentTesla exe NanoCore	spamhaus
2020-05-11 08:57:11	https://aaacityremovalist.com/INV0018384.exe	Offline	exe RemcosRAT	spamhaus
2020-05-08 10:13:09	http://aaacityremovalist.com/INV0018384.exe	Offline	exe RemcosRAT	spamhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-02-22 09:55:08	7b369fd0996c226be39abc33e7727f13ccd9435d00321d49b7f81ca4f93b6a9c	exe		AgentTesla
2020-07-29 07:42:07	d24e4acfbe8cc67f262b4f6fd53cab9c202ce8d43337ae051152384453e3df3d	exe		AgentTesla
2020-07-19 22:48:23	11a0a7f8a1ad05d1989ae7ce089843379c1b6ab748e3e14d81061004cdcf1b1b	exe		NetWire
2020-07-17 06:15:09	db5dc86af801e2c47013fc8aa7d23d10fee192e8a6020121ddb542a4a3555b55	exe		NetWire
2020-05-14 02:40:46	a68d6f1f8eac6e726187af10e2c6a7372696792cfd1b73eecbe4b77a874590a7	exe		NanoCore
2020-05-13 05:08:02	a67d4aa57cad3a898d742b9e3b48f92abde261fcc0107365582970f1b27f7b10	exe		AgentTesla
2020-05-11 08:57:11	a9e39635327d85706bdb626e574f10b0fcdbee3514f339502c9ae39fa17742aa	exe		RemcosRAT
2020-05-10 22:32:41	a9e39635327d85706bdb626e574f10b0fcdbee3514f339502c9ae39fa17742aa	exe		RemcosRAT
2020-05-08 21:22:56	b8ab71787992f200af70d64f385cc2e87e441fb5e2ab153588b1f49bbf5b2829	exe		RemcosRAT
2020-05-08 10:13:08	5744db104260134735390f73f8db18a3283957d0d25971163ea45ae7654ffe53	exe		RemcosRAT