URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-11-04 11:09:39	76.76.21.21		SBL688052	AS16509 AMAZON-02	US	yes
2023-06-08 00:51:40	51.75.237.248	ip248.ip-51-75-237.eu	Not listed	AS16276 OVH	FR	no
2023-05-10 17:10:11	185.98.131.234		Not listed	AS210403 LWS	FR	no
2020-11-16 14:02:25	185.124.202.8	ks1851242028.kalanda.net	Not listed	AS61047 KALANDA	FR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-17 13:06:19	https://actiglass.fr/esun/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-16 13:42:21	https://actiglass.fr/nra/?1	Offline	BB28 geofenced GuLoader js Qakbot Quakbot USA	Cryptolaemus1
2023-05-10 17:10:11	https://actiglass.fr/plui/	Offline	BB27 geofenced js Qakbot qbot Quakbot TR USA	Cryptolaemus1
2020-11-16 14:02:25	http://actiglass.fr/wmcvm7.rar	Offline	Dridex	stoerchl

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-19 17:36:21	1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee	js
2023-05-19 16:09:27	51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4	js
2023-05-19 02:35:52	76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8	js
2023-05-19 01:25:45	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-18 22:56:07	d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182e	js
2023-05-18 21:29:13	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-18 20:44:58	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 19:26:56	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 18:26:57	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-18 18:19:46	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 16:58:59	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 16:16:43	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 14:26:51	3c9f0c1b3c44e790181490bad095c80bcf686f0872db03024bf08f802acb0a62	js
2023-05-18 13:53:11	bb344db64af9411aaf11a0eb00925591940deb72da0e3b1684cd5dc6ce13c1fd	js
2023-05-18 13:11:07	ceb34fba0cd428a9dffee10f6b9c5857bfe8e363974adecbd1c42b994a5bb36c	js		Quakbot
2023-05-18 12:34:49	9f58336c0b0f6cde0a91dbee871cad45a315c5413863ef2b29affc9c949ee72d	js		Quakbot
2023-05-18 12:31:17	bb118ed7175733d7b31163818a3948e5e35d0e3ab3627a549e93cf6afa196585	js
2023-05-18 10:55:10	cee11dd3e06833ff80c75ab19feaefb05e62b347d9ed97e9ecb8f4ac5a889f95	js		Quakbot
2023-05-18 09:18:32	7d4c05f2b21fe02c34ffc3bc7077929482fa7cdbc01c894e2647cf6e38ab20bb	js		Quakbot
2023-05-18 08:37:58	71399d25c8497d7f81c87b8f5ec8d5071d8a62ac85ee254638bf8d24feccc5ad	js		Quakbot
2023-05-18 07:35:28	4604c9a02925f680aa68df7691aab5b247d61f74fa2c2c261a58ed40e9680327	js		Quakbot
2023-05-18 06:36:24	dcb4d36d51f163518e7ef97ffd77d55e49a72dc3b351a6e4051187b5361ecf7f	js		Quakbot
2023-05-18 05:58:51	860e36fc5c8d21dbe486debbb3dc78ef1409446eb46d7c84b937f01cd3075364	js
2023-05-18 05:10:42	ee8f7825f5b87fbdb90f5bc8eff0cfadc358c64cfca2dcb37acfd398d5b2f201	js		Quakbot
2023-05-18 03:16:17	2ef6e700c619c1ace05075497393d8ac827d836ec052de9b6a71a0cdcd343141	js		Quakbot
2023-05-18 03:08:33	fc437c6d702c5302119f00f15fd16ab7ac0bf3d40875a890571b0d7d670b7a71	js		Quakbot
2023-05-18 01:45:58	4422126c61949a9848ddc759de968eb699c5364973a271dc9aac631121591d13	js		Quakbot
2023-05-18 01:09:59	6cb675336525f3ee63666c008f21faa80acdb6e41fec92d7d75201b385880e2c	js		Quakbot
2023-05-18 00:51:09	91a5198c948c77a1f4e846013f6bb7d2ff376ca399e58f825e90cfbaf5c3c773	js		Quakbot
2023-05-17 23:21:24	77c78781fbf40291d31c545dd06a094505a49bd415cbeed6b922cafc6af07586	js		Quakbot
2023-05-17 22:34:33	dd72eab3dc3f67fee1ec6cae276e3ecb4fd364daf45f773c22f8a0c771fbf742	js		Quakbot
2023-05-17 21:46:53	874c90fd9f5dbc042d5e87dee75b68570376e628600a8d08dc1083545283052e	js		Quakbot
2023-05-17 21:21:07	7237114103b60a76ef6a67916d0d6fc1e14dc707087bd27684d1093748393f39	js		Quakbot
2023-05-17 21:15:53	b4a90889250c70642150c7b822ece35979290cb3664a5f778ccb8195b4c440ec	js		Quakbot
2023-05-17 19:57:10	be61952594d1dcb5774683bd939e4e278b596ba069248f2ff16fc39f2351936f	js		Quakbot
2023-05-17 19:20:24	9ac768cf3025869132bdb78aad3f4505cd8dd7e5ddc218e64d6645ba8db5e4f4	js		GuLoader
2023-05-17 19:10:27	ba77ea0ae3afe4582d390d1930a3792bde2ba411df7e3c05ae156306c5cd46e4	js		Quakbot
2023-05-17 17:03:23	a87f72f4479c91e3e36a8b6a204a7d9169c1e604389f6818744f3bcca14fd959	js		Quakbot
2023-05-17 15:48:17	43f0a123b00abe19f1412b6fff2944e5bf4436a2ba20e3493ba9708ee5088c8b	js		Quakbot
2023-05-17 15:34:08	a9c6050bc229b2d8d2b411d575194857f0f0b908185bcc15cd09d5c25f330867	js		Quakbot
2023-05-17 14:23:39	4fe762f3bef37ff2896345d647489f0ee60515aaf5da2c93572e1088e91adf79	js
2023-05-17 13:06:19	8323339fe9864a8ae4d4d40aaccb4bf92a9b3ba6b545c2210dec09fb28bf9374	js		Quakbot
2023-05-17 12:37:14	f2a2ace114103a041e79ed5165b96ac32d3595aaa0c8f1ff92533be7728179a4	js
2023-05-17 10:31:33	7956a036f0132ef25f7475f53f20861234b8bde9970178a7c995495bc0fb6ac1	js		Quakbot
2023-05-17 09:42:09	48951c37f90b09b6425eb950deff1660b1bd6f293c72ccf1aa7b5f6cd8ee979a	js		Quakbot
2023-05-17 07:25:43	a3a270ef06763672943f5b298896855ad1ffc30720203cd9157b46a988028581	js		Quakbot
2023-05-17 06:03:09	e87e7095c07c787cde16356d09c869d9e2242a336da21d02d7531af4856c95ca	js		Quakbot
2023-05-17 04:17:28	563ba7cc24d948ca67c4d60b64ce465752ca5e035873f8ba2c7690530f67e2c6	js		Quakbot
2023-05-17 04:03:21	1f7dfb51588ffd63594701ca13610c005b8f83e31dcc31a0371d5c3c3c6066a2	js		Quakbot
2023-05-17 01:30:29	51108bf84b3c7057a93dd37821065e9a09c2e2ca894cb68746e3afe8e0886238	js		Quakbot
2023-05-16 23:06:36	987a0a7516b6a5d2a006a0a8a4f3d0de38373cc1e12e25c3484d0c32d9c85666	js		Quakbot
2023-05-16 22:47:38	9007f4d836bc73490740e0350fabf4597c2dc0a6a1fcc0706d4c094535629ce3	js		Quakbot
2023-05-16 20:46:10	87c3c995eed7cc5abd6912bba9c621965b0f2ae8850be8ba0d36a36e3628ddb0	js		Quakbot
2023-05-16 18:38:16	e38adec47bb83ee6b5ff1d8d1128a3e6a2a6d14b0da88ac251030aa50971dd1c	js		Quakbot
2023-05-16 15:46:47	a2f24380cf6be05f59e5bf63d1adebb71cea74f31b042fb53b7c01b53d456d7b	js		Quakbot
2023-05-16 14:35:33	68e39db4ba928f7a74423c250e2af27f7bc6e1c16728de9f9fad3bf5968a7ac2	js		Quakbot
2023-05-16 13:42:21	c42bf49ef840356741bfefc26076eec472f085c8dfffc5bdb8df998c3c313755	js		Quakbot
2023-05-12 17:15:22	9b360b3ff4fbb848ff407b48a97cb3b4b95a8b102b776aefdda3fb1b45d577be	js
2023-05-12 05:14:10	370be9649aaee0903aba25b22c766cef0fb119d738900c0bf460ff1de135598a	js		Quakbot
2023-05-11 17:13:58	d3af5fb4666e2a7e79b1a201efa2c868c561c746e1e1ba362ff69a477d22bf80	js		Quakbot
2023-05-11 05:12:52	2f4ed482533667c9353424306a11e1a423e67424da9b05e7153137053695f38f	js		Quakbot
2023-05-10 17:11:46	650582a117f9c9de86532b5e0591a8be39bd9ecd03c66851caafe970cd53b565	js
2023-05-10 17:10:10	38855f3b690734ac3a363fcf3a192fa5b55ebe220ebbcff42acbe21f7fe5b0bf	js		Quakbot
2020-11-17 05:04:20	6d5ca5fcaba6a6558013344ff5f11328e8079540e8ebe95789d9c185e11f8e44	dll		Dridex
2020-11-16 15:35:50	fd6f6c377f403f5faccf5c4bb03a0d5af94f7f57ac13572a42b187cdbda027cc	dll		Dridex
2020-11-16 15:14:30	8cc5a65a8206e82d93604182bb6cd7f72e08a6b45cdf07e6479e493457c0ab12	dll		Dridex