URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-06-14 20:35:16 | 195.96.151.36 | Not listed | AS41634 SVEA |  SE | no | |
| 2021-11-28 02:43:57 | 195.96.151.37 | Not listed | AS41634 SVEA | SE | no | |
| 2021-04-30 10:52:10 | 194.32.146.103 | Not listed | AS212238 CDNEXT | SE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-06-15 01:46:12 | https://cdn-143.anonfiles.com/JfVcLbwfzc/67a534... | Offline | dropped-by-amadey |  viql |
| 2023-06-14 20:35:16 | https://cdn-143.anonfiles.com/DefcKbwez2/e4d59e... | Offline | Amadey dropped-by-amadey | viql |
| 2021-05-02 05:31:07 | https://cdn-143.anonfiles.com/vb74b5uau3/e9fe3b... | Offline | exe NanoCore  | Anonymous |
| 2021-04-30 10:52:10 | https://cdn-143.anonfiles.com/18zc70t0u0/5ced14... | Offline | exe | Anonymous |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-06-15 01:46:12 | cf58ff751bc10914fca398a2f609114dd24005ac2307435de084488bed63a0a1 | exe | ||
| 2023-06-14 20:35:10 | 956ad9b8b0f3fe9a83d875f0b90b3c6fc72e3b670549de683de44b70f0a090c8 | exe | Amadey |