URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	buildwellgulf.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-08-09 07:14:02 UTC
Total malware sites :	4
Online malware sites :	0 (0%)
Offline Malware sites :	4 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-07-25 18:18:54	15.197.240.20	acf3b736b777428f5.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2019-08-09 07:14:04	111.118.215.210	bh-in-15.webhostbox.net	Not listed	AS394695 PUBLIC-DOMAIN-REGISTRY	IN	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-05-20 05:01:36	http://buildwellgulf.com/z/cam/orin.msi	Offline	msi	zbetcheckin
2020-05-19 20:57:04	http://buildwellgulf.com/z/de.msi	Offline	msi	zbetcheckin
2020-05-19 18:49:04	http://buildwellgulf.com/z/cam/form.msi	Offline	Formbook	James_inthe_box
2019-08-09 07:14:04	http://buildwellgulf.com/skin/wec/form.msi	Offline	exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type
2020-05-20 10:24:54	73a607810086a7e0134fdb2cbb36de0029f4f14575e5327373c39535a2684f4e	msi
2020-05-20 05:01:36	2b68ba16b8a44890c23fba68bccc1ef620ff3f12fd0d0fc2f7ffab92fcbde46e	msi
2020-05-19 20:57:04	9d69988694426b1366944d4e3c4fe2e1c8eb36060f1d8cf46bab6b880bd9598c	msi
2020-05-19 18:49:04	6671b5a2f99cb5cb9a88f0b52430855550a08bd17321e6abf8cf88b69d00bbe3	msi
2019-08-13 09:51:23	0847a767812cd82c4dfed468de06ed8f0cf7e4f1ef6c8ae258212cb3e84024c6	msi
2019-08-12 16:15:23	c318a0f017052f7a046b65d5e5c778cca49177ecc7b956fd10c644141a3bc494	msi
2019-08-12 12:22:14	fbc366c9a16dbb77760033a79afb23a41e5a8b945ef0644e070241c683fcb66b	msi
2019-08-12 09:06:27	fb1a129354ac9f9a3dc07ca5b3b54536b0d67d53d24c3c852df65b443f31d2fc	msi
2019-08-12 03:02:11	24a9547b5117eae396a55789e3b4cfd9f59bdc88d7cc2d15c2a72c203743e610	msi
2019-08-09 15:06:24	2b126688506f3d2561a358e42fb8e820c233c9f6fa3b58774e889398c4257751	msi
2019-08-09 10:12:23	c64a79483940b73924d0a0b87c6ddc5de6cc5e75a75380e6ee1c562a6ca6f78c	msi
2019-08-09 08:03:18	9fb0b5ecade0d9d03af4a4dce095b48b40b78c77695f9cc49d7cb40ebf7665e0	msi
2019-08-09 07:14:04	dbaac474a44ae6f50f520b0f041a12a99b8d6a75df47ec3a88c0f97f7607bf57	msi