URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-03-08 08:04:51	210.15.254.232	customer.netspace.net.au	Not listed	AS4739 INTERNODE-AS	AU	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-03-08 08:05:26	http://brbs.customer.netspace.net.au/deltax.exe	Offline	exe zeus	zbetcheckin
2020-03-08 08:05:02	http://brbs.customer.netspace.net.au/Kagqd8A.exe	Offline	exe	zbetcheckin
2020-03-08 08:04:51	http://brbs.customer.netspace.net.au/slv.exe	Offline	exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-03-08 08:05:26	4a5566975893e6df1c42c57a5671cf4a18cb0e35613fb894a6341b9cfd95c877	exe		ZeuS
2020-03-08 08:05:02	bea8e1d72b7865434004fd259e71a8b1b4b34d2ef6c76dfbc8c7f20ea552e961	exe
2020-03-08 08:04:51	097359f1307462737dfca449454ff9ff7b057ee20e89488117da926ad7dbe02d	exe