URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-01-28 20:11:29	192.169.69.25	sinkhole.hyas.com	Not listed	AS27323 SERVERSTADIUM	US	yes
2020-10-14 14:20:07	5.135.73.103		Not listed	AS16276 OVH	FR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-14 14:29:05	http://awersfghjkloiuytgfdswedfghjklmnbvcdcfxz....	Offline	exe opendir	abuse_ch
2020-10-14 14:28:06	http://awersfghjkloiuytgfdswedfghjklmnbvcdcfxz....	Offline	AgentTesla exe	abuse_ch
2020-10-14 14:20:07	http://awersfghjkloiuytgfdswedfghjklmnbvcdcfxz....	Offline	AgentTesla exe opendir	abuse_ch
2020-10-14 14:20:07	http://awersfghjkloiuytgfdswedfghjklmnbvcdcfxz....	Offline	exe opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-10-14 14:29:05	f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aa	exe
2020-10-14 14:28:06	6d9a45dbc2e4cb3cbcd745e44efa13c3c895c202bf9367f572d1d94d141cc81f	exe		AgentTesla
2020-10-14 14:20:07	f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aa	exe
2020-10-14 14:20:06	a183a94f7c049de1770e76be272a29e0ec7b3b4344ef5c4dc2fe9ddd5962b5bd	exe		AgentTesla