URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-02-14 09:24:28	104.21.77.8		Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-02-14 09:24:28	172.67.203.18		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-11-09 06:52:04	185.5.53.33	ricina.serveriai.lt	Not listed	AS212531 Interneto-vizija	LT	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-11-09 08:44:04	http://ciop.lt/wp-content/uploads/2017/05/thai.exe	Offline	AgentTesla exe	zbetcheckin
2020-11-09 08:44:04	http://ciop.lt/wp-content/uploads/2018/06/whe.exe	Offline	AgentTesla exe	zbetcheckin
2020-11-09 08:38:04	http://ciop.lt/wp-content/uploads/2018/06/jiz.exe	Offline	AgentTesla exe	zbetcheckin
2020-11-09 08:38:03	http://ciop.lt/wp-content/uploads/2017/05/whe.exe	Offline	AgentTesla exe	zbetcheckin
2020-11-09 08:37:04	http://ciop.lt/wp-content/uploads/2017/05/elb.exe	Offline	AgentTesla exe	zbetcheckin
2020-11-09 06:52:04	http://ciop.lt/wp-content/uploads/2019/04/ago.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-11-09 08:44:04	222af506bee8af177dc09a2f709208725bf5823f145fd9f5b10340e203f402da	exe		AgentTesla
2020-11-09 08:44:04	9ae5b857d79af44691c8506b1e46b164f859eab93b6eee04ef1fd4eb097f5c42	exe		AgentTesla
2020-11-09 08:38:04	146c73c89c605e30aa22889d8b7a84392a87c9bd3aa047cae71027761fa6b286	exe		AgentTesla
2020-11-09 08:38:03	e4c13b3365c0cf8e7cab839c1e1ab2a0fa9d2d4b097e70878778d62da8b5ec35	exe		AgentTesla
2020-11-09 08:37:04	cd775ed69ea717118e4f45f05d9271670253b01b709133761494de5f756110ca	exe		AgentTesla
2020-11-09 06:52:04	190504575c1829f2c6e9a143685b1c81df155edc81e8d60505e439ab3deb33fc	exe		AgentTesla