URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	beltmexico.com
Domain registrar:	Namecheap
Domain registration date:	2018-11-26 21:03:54 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:14:59 UTC
Total malware sites :	1
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-10-13 13:15:10	192.185.137.54	192-185-137-54.unifiedlayer.com	Not listed	AS19871 NETWORK-SOLUTIONS-HOSTING	US	no
2021-11-26 22:17:23	99.83.154.118	a51062ecadbb5a26e.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:15:10	https://beltmexico.com/mgy9cg.tar	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 14:53:39	5ce136190cb03f90d36d8dfeaae3e008a0a59415d081eb7b5be6802bcc44ba7b	dll		Dridex
2021-10-14 07:10:59	d759de9c016724326b323020c2201cfc633091bf7f104546634f64f801d26b1c	dll		Dridex
2021-10-14 04:14:20	d27f8c44bf5a82d98356fba379662d35b57cac933d9601f40e7a6854b1a2f9f5	dll		Dridex
2021-10-13 19:49:40	43478f6b0e81549139ea3a5fd8f93194e57137bf9eba1ae1dfd9867286fb2983	dll		Dridex
2021-10-13 19:00:30	8a47bb3a1987425ac99f81c7a307a30a22f6200782dec8b3cbf2ce825d322c39	dll		Dridex
2021-10-13 17:26:52	426b5c4332e09b331eeabd7a4338c58a275fc0a6d99547a27b4c3e5c47182c95	dll		Dridex
2021-10-13 16:07:38	7ab24453e040b90ec8d8389737ca6968a35ec24a28e494b97eb9eb770c90e8b2	dll		Dridex
2021-10-13 15:02:37	7d938aefd1e3971b1b135badfae052ea71a3be5b0b9a74756717702fcc886e1d	dll		Dridex
2021-10-13 13:15:08	3fd6a0b667270f85b4d929748b6b32d1ecb65d01fc0e3cec4bbc025452530f07	dll		Dridex