URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 09:03:37	15.197.240.20	acf3b736b777428f5.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2021-01-20 13:26:47	64.37.52.138	sun.nsjet.com	Not listed	AS33182 DIMENOC	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-01-20 13:26:47	http://cms.ivpr.org/by9zwa7p1.zip	Offline	dll Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-01-21 17:14:11	642ab82c74a436b00f64a17174e23f40a64b721b6128e80a70e3cbffc7d3424a	exe		Dridex
2021-01-21 14:25:43	9c9dcacbcb40813c2efc0d9934eace278cb39e9042a215d1cef9ad6eca43a478	dll		Dridex
2021-01-21 09:48:26	c4a5c711383f14a55f50f8d4b4b7c47f5539a69be2e53b12d7668070ac3e7cbd	dll		Dridex
2021-01-21 08:14:03	90bd41b029a4618b84125ea9b16256f07d8a29ca4a11e6a902bbe336c2386f52	dll		Dridex
2021-01-21 02:15:08	4314efb523499b2e7bd3de57d762c972c11d65790d6415ce3b9d3e84176c88d0	dll		Dridex
2021-01-20 20:46:37	fc646c8e5daae0acb513d09a199292da6a9f35b4c4bbc0fc452da63f541aed1d	dll		Dridex
2021-01-20 20:11:04	2bfa88a5c855f4d24139d5d9c556cfbdb05a5a68b23a528ae53226d526dc4e7d	exe		Dridex
2021-01-20 18:56:27	c2113f0ef3c074e672e4fb416720db882141c27a39fdba160f86b58eeac5af06	dll		Dridex
2021-01-20 18:34:42	2f7d44672a0be121841f5bc447c5c4580846c8ba385bb2c6815c6879f5cda2d2	dll		Dridex
2021-01-20 17:46:38	02ba693d75dee6a99d3a2414f6a426940696a5ec5d2d7c8f368f929697e55e54	dll		Dridex
2021-01-20 17:10:39	c0e892608e649eadcb648daa1e3cb8a4bfa7cfd41a6bb522f3766a9804400ca3	dll		Dridex
2021-01-20 16:37:04	37e3ea6fccd37209f1e11f3781565e2f2eaa2de13ddf62ed75330936951cf445	dll		Dridex
2021-01-20 16:01:07	f14930c641c001377c3c4c468fc97ab43acde69287819c134d529d95c0fb7bb4	dll		Dridex
2021-01-20 14:16:35	791252fc4def3c4c3bdb270633ffc88c0e2cd8e8e8ba299825a83841a273e7dd	dll		Dridex
2021-01-20 13:26:45	b9bb671587f2dad8a3df83d6bd0b7b8327edf93fadbefe8b6aa7eabe6698ae88	dll		Dridex