URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-04-03 22:23:20	192.169.69.25	sinkhole.hyas.com	Not listed	AS27323 SERVERSTADIUM	US	yes
2020-04-02 10:59:06	109.169.89.118		Not listed	AS20860 IOMART-AS	GB	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-04-02 14:16:03	http://covidinternationalspreadsoomuchtruehead....	Offline	Quakbot	JayTHL
2020-04-02 11:01:06	http://covidinternationalspreadsoomuchtruehead....	Offline	AgentTesla exe	oppimaniac
2020-04-02 10:59:18	http://covidinternationalspreadsoomuchtruehead....	Offline	AgentTesla exe	oppimaniac
2020-04-02 10:59:12	http://covidinternationalspreadsoomuchtruehead....	Offline	AgentTesla exe Quakbot	oppimaniac
2020-04-02 10:59:06	http://covidinternationalspreadsoomuchtruehead....	Offline	exe Formbook	oppimaniac

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-04-02 15:00:24	736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582	exe		Quakbot
2020-04-02 13:05:33	05e3ba5e25b4606fafcc12cc511ecad5073f31c05aac30a27f076f4305650a76	exe		AgentTesla
2020-04-02 11:01:06	022f620a938c681b650702fb406c53f7267e5678028a9ad1461f4852405f7a6b	exe		AgentTesla
2020-04-02 10:59:18	3f7822101de013bb85adfb07f99fcfa549284e1c987b9dcd4b3dff5536758e89	exe		AgentTesla
2020-04-02 10:59:12	736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582	exe		Quakbot
2020-04-02 10:59:06	2a40a9e18303875b2db452783190820001c898e8374864fec29793bf43bbe401	exe		FormBook