URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | bestsoftwaredownloads.com |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Not blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2025-02-13 14:33:05 UTC |
| Total malware sites : | 6 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 6 (100%) |
| A record(s) observed : | 3 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-11 14:34:14 | 15.197.212.58 | af1f69020f2387294.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | no |
| 2025-03-27 07:09:57 | 15.197.172.60 | a63452c77db78f54b.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-02-13 14:33:07 | 45.141.59.161 | mail.laviadililith.eu | SBL632422 | AS213373 IPCONNECT |  SC | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-02-13 15:20:18 | https://bestsoftwaredownloads.com/VPN-Installer... | Offline | connectwise fakeapp |  JAMESWT_MHT |
| 2025-02-13 15:20:11 | https://bestsoftwaredownloads.com/AutoClicker-J... | Offline | connectwise fakeapp | JAMESWT_MHT |
| 2025-02-13 15:20:06 | https://bestsoftwaredownloads.com/BTC-Flasher.exe | Offline | connectwise fakeapp | JAMESWT_MHT |
| 2025-02-13 15:20:06 | https://bestsoftwaredownloads.com/ZipUnlocker.exe | Offline | connectwise fakeapp | JAMESWT_MHT |
| 2025-02-13 15:20:03 | https://bestsoftwaredownloads.com/Roblox-Engine... | Offline | connectwise fakeapp | JAMESWT_MHT |
| 2025-02-13 14:33:07 | https://bestsoftwaredownloads.com/USDTFlash.exe | Offline | connectwise fakeapp screenconnect | JAMESWT_MHT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-02-14 00:00:13 | 6d9442ae6ba5a9f34a47e234b6047f61d8ac129e269199793ebb0bed1ad7e3ba | exe | ConnectWise | |
| 2025-02-13 15:20:18 | f93d6ef0b54b5e882d1420339c3083315cc2104ea73c95fea0dca9594913e282 | exe | ConnectWise | |
| 2025-02-13 15:20:11 | 552d6bc9dd165279c330cf381ceab185b407878ea81393cf2bae437ebecd9dbe | exe | ConnectWise | |
| 2025-02-13 15:20:06 | 21562797103d497b3f17defd8cde542197089e5adfef9cfe73957eec1b8de565 | exe | ConnectWise | |
| 2025-02-13 15:20:06 | 9a5fc377ed727b660737357865c7694f60c7735cfcf1652f0a6dfd0121781c38 | exe | ConnectWise | |
| 2025-02-13 14:33:07 | a0c8f8770fffd941b3e123023432e275aea210a7ab71a6bce5be890861f054c2 | exe | ConnectWise |