URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	aged-saito-5827.penne.jp
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-06-02 06:03:57 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-06-02 06:04:00	157.7.107.49	157-7-107-49.virt.lolipop.jp	Not listed	AS7506 MAINT-JPNIC	JP	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-06-02 15:55:13	http://aged-saito-5827.penne.jp/AHU/FNK.exe	Offline	emotet exe GuLoader heodo	zbetcheckin
2020-06-02 11:42:04	http://aged-saito-5827.penne.jp/MIY/MLY.exe	Offline	exe GuLoader	zbetcheckin
2020-06-02 11:38:07	http://aged-saito-5827.penne.jp/OSE/OSI.exe	Offline	exe GuLoader	zbetcheckin
2020-06-02 07:40:53	http://aged-saito-5827.penne.jp/Img/CIC.exe	Offline	exe GuLoader	abuse_ch
2020-06-02 06:04:00	http://aged-saito-5827.penne.jp/MKI/KINO.exe	Offline	exe GuLoader NanoCore	gorimpthon

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-06-03 21:13:55	b6da2d04d96152fd010853b3fd0f67ef92af20e81b47a9395617050f11f53b9a	exe	GuLoader
2020-06-03 21:13:51	c08b4ffc1bc06a6698fb6ebd420dc20a62f4f30924c6698d2efe393bd77835e6	exe	GuLoader
2020-06-03 21:13:35	c6894f412f49a6489bd79e760014a25a2bfcb1edc8af9cc98aaacddf171eb14c	exe	Heodo
2020-06-03 10:35:07	f345455cae0e8e49f4c68468a461dd2cf63384268e86a5eb78c4b5119c7038f2	exe	GuLoader
2020-06-03 10:35:02	69e1ffedc5a4692670ee56911f5ae80845cf6954461f72f6748288a7a04ee9ae	exe	Heodo
2020-06-02 19:40:47	aef1b48a6c4077dd71346018f0fbbf86239a35f34babf980e4469da9ddbf42ac	exe	GuLoader
2020-06-02 19:40:42	2f99de0c12f67f877e1944d5bc6f889ff9013fb7e902b91260f4bdc952959d7e	exe	GuLoader
2020-06-02 19:40:24	6c09ece0b9aad3203ecbbd39ece95dd2ec4caea7d0dd4259bc3b5e4158218dd9	exe	GuLoader
2020-06-02 19:35:08	e16c2f6e8bad564692abd575007f18e17013e423d7cfe8882872d021ef3439f2	exe	GuLoader
2020-06-02 19:34:33	599b9d630be54cdf892e8a434cd89410dd81b010512de5240552a16f4edec4c7	exe	GuLoader
2020-06-02 15:55:13	70b0409a5d3866c1ae91cab292d83049a5d541d4d687efbcafb4ce4bff8bf53a	exe	GuLoader
2020-06-02 11:42:04	9d772f078ebff5dd18830b266cf39eaea44289e765d6290e8589e684a22d0946	exe	GuLoader
2020-06-02 11:38:07	12bae6b2d092fc8c776ea509d90b393df8e8f336214bb155f7e2d7f18beb4cb1	exe	GuLoader
2020-06-02 07:40:53	dd7268284b041dafef56b6a8a4b565b3a0c54e1eaacc68121a1688e03798e72d	exe	GuLoader
2020-06-02 06:03:59	71ba6b649b4ea43c7139f5d429d2ec449f129fdc588c103546d5970a6db33103	exe	GuLoader