URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: afoshaclass.com.br
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-11-16 14:02:12 UTC
Total malware sites :1
A record(s) observed :3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-05-23 15:33:23 108.167.168.29108-167-168-29.unifiedlayer.comNot listedAS19871 NETWORK-SOLUTIONS-HOSTING- USyes
2025-05-02 18:06:01 108.167.169.121108-167-169-121.unifiedlayer.comNot listedAS19871 NETWORK-SOLUTIONS-HOSTING- USno
2020-11-16 14:02:18 162.241.203.165162-241-203-165.unifiedlayer.comNot listedAS19871 NETWORK-SOLUTIONS-HOSTING- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-11-16 14:02:18http://afoshaclass.com.br/pka8yz.txtOfflineDridex ext stoerchl

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-11-16 15:31:25fd6f6c377f403f5faccf5c4bb03a0d5af94f7f57ac13572a42b187cdbda027ccdllDridex
2020-11-16 15:05:578cc5a65a8206e82d93604182bb6cd7f72e08a6b45cdf07e6479e493457c0ab12dllDridex
2020-11-16 14:02:164bbf766e8ac0148b77e659e3a3cfd110c6f219468c240987874c03107b4f8826dllDridex