URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 10:26:36	68.178.153.221	221.153.178.68.host.secureserver.net	Not listed	AS26496 AS-26496-GO-DADDY-COM-LLC	US	yes
2025-06-24 15:37:56	13.248.213.45	a67c48129651a0940.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2025-06-24 15:37:56	76.223.67.189	a67c48129651a0940.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2020-08-17 13:20:14	151.106.26.182		Not listed	AS29066 VELIANET-AS	FR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-21 16:58:12	http://alphasheild.com/havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:58:10	http://alphasheild.com/493havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:58:07	http://alphasheild.com/489havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:58:05	http://alphasheild.com/453havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:58:03	http://alphasheild.com/414havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:58:00	http://alphasheild.com/400havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:55	http://alphasheild.com/294havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:46	http://alphasheild.com/26havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:43	http://alphasheild.com/258havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:30	http://alphasheild.com/24havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:21	http://alphasheild.com/23havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:19	http://alphasheild.com/215havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:16	http://alphasheild.com/1havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:14	http://alphasheild.com/18havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:09	http://alphasheild.com/176havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:07	http://alphasheild.com/16havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-21 16:57:05	http://alphasheild.com/157havymetal.exe	Offline	exe Trickbot	p5yb34m
2020-08-17 13:20:14	http://alphasheild.com/metalf.php	Offline	Trickbot	Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-08-21 16:58:12	cb14cfde1a13ff2af4e59b91ed9dca3bb0e024dd24cd671271fe98da8dd16b48	exe		TrickBot
2020-08-21 16:58:10	c512b38e476dada9b7b00d34625c8d543fa927068893482d8f521cddf2aadaa6	exe		TrickBot
2020-08-21 16:58:07	ef0378180ee06c4ea1ec113e9a3a81c528c958e2ba57d820f1e0b79839931192	exe
2020-08-21 16:58:05	9bf3b7bc3edb97d5100813d5552ef3d3f30c733c19d73088a557c7c35e41b91f	exe		TrickBot
2020-08-21 16:58:03	53827c2bc5a14548fc69edfab8e05aaeae25bc6f7c3127e55a139a04cf47e7be	exe		TrickBot
2020-08-21 16:58:00	dc3e693b38502748bd4f72193705fbbc87bec00d38f62353f0d86079bea7e527	exe		TrickBot
2020-08-21 16:57:55	671c9537d12d7d62425dcd7260a20cd4b360403a9ac96c4c75670e3bd07ba21a	exe
2020-08-21 16:57:46	a3b1da76ef8f66bbba22d9c6af1f271737c8430ad18aea981ea54dfd913bb345	exe
2020-08-21 16:57:43	9ce8e43223dbe77ae6eb93c9b52c4167324de5af4dfefc8dc769364ac0c06d73	exe		TrickBot
2020-08-21 16:57:30	4ae7c82b0152b375a4e1279d7df7ee6ebd44f5e3d6ecbfe53b81d3044ba25bac	exe		TrickBot
2020-08-21 16:57:21	1f281fc8459610058e7a884b51fb73347730853759b4acdb5dbb9d8dcce0868c	exe
2020-08-21 16:57:19	83e8b4e8bfda13e8c079c87624bfe25808cc9aa4b74b00b6543f9c0f11984242	exe		TrickBot
2020-08-21 16:57:16	85125d31afb7e4e43c181645e084eb414ca27d0f174b19cf9fe6bed39b8f8721	exe
2020-08-21 16:57:14	c71ab925c9e567f64d8229d912b8380f302dab3648f51b0e8284ebef0504d1fe	exe		TrickBot
2020-08-21 16:57:09	99dc1e6c7b821f9931a796496e2daf6fd4b6d71112fbe4db628346500754ff33	exe		TrickBot
2020-08-21 16:57:07	c35df2c45016aac3807290fd0a5fc5ccf2f11cd9ff8aa90cf9185fa1e1fa0632	exe		TrickBot
2020-08-21 16:57:05	8bd6232899bb78f16deaa1b35ea040027c74c7f0d7028cd5b35507bbf79eca97	exe		TrickBot
2020-08-18 02:45:31	53827c2bc5a14548fc69edfab8e05aaeae25bc6f7c3127e55a139a04cf47e7be	exe		TrickBot
2020-08-18 01:54:28	99dc1e6c7b821f9931a796496e2daf6fd4b6d71112fbe4db628346500754ff33	exe		TrickBot
2020-08-18 01:23:33	dc3e693b38502748bd4f72193705fbbc87bec00d38f62353f0d86079bea7e527	exe		TrickBot
2020-08-18 00:40:49	c512b38e476dada9b7b00d34625c8d543fa927068893482d8f521cddf2aadaa6	exe		TrickBot
2020-08-17 23:01:52	ef0378180ee06c4ea1ec113e9a3a81c528c958e2ba57d820f1e0b79839931192	exe
2020-08-17 22:49:17	83e8b4e8bfda13e8c079c87624bfe25808cc9aa4b74b00b6543f9c0f11984242	exe		TrickBot
2020-08-17 21:04:47	c71ab925c9e567f64d8229d912b8380f302dab3648f51b0e8284ebef0504d1fe	exe		TrickBot
2020-08-17 19:24:37	9bf3b7bc3edb97d5100813d5552ef3d3f30c733c19d73088a557c7c35e41b91f	exe		TrickBot
2020-08-17 18:36:42	a3b1da76ef8f66bbba22d9c6af1f271737c8430ad18aea981ea54dfd913bb345	exe
2020-08-17 18:03:26	85125d31afb7e4e43c181645e084eb414ca27d0f174b19cf9fe6bed39b8f8721	exe
2020-08-17 17:45:29	671c9537d12d7d62425dcd7260a20cd4b360403a9ac96c4c75670e3bd07ba21a	exe
2020-08-17 17:14:28	c35df2c45016aac3807290fd0a5fc5ccf2f11cd9ff8aa90cf9185fa1e1fa0632	exe		TrickBot
2020-08-17 16:59:59	1f281fc8459610058e7a884b51fb73347730853759b4acdb5dbb9d8dcce0868c	exe
2020-08-17 16:44:31	8bd6232899bb78f16deaa1b35ea040027c74c7f0d7028cd5b35507bbf79eca97	exe		TrickBot
2020-08-17 15:12:16	9ce8e43223dbe77ae6eb93c9b52c4167324de5af4dfefc8dc769364ac0c06d73	exe		TrickBot
2020-08-17 13:42:16	cb14cfde1a13ff2af4e59b91ed9dca3bb0e024dd24cd671271fe98da8dd16b48	exe		TrickBot
2020-08-17 13:20:14	4ae7c82b0152b375a4e1279d7df7ee6ebd44f5e3d6ecbfe53b81d3044ba25bac	exe		TrickBot