URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2022-06-23 13:06:14 | 35.169.94.148 | ec2-35-169-94-148.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES |  US | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-06-25 03:43:50 | http://cpziu.com/naot/nfugiit | Offline | aa Qakbot  qbot TR U523 zip |  Cryptolaemus1 |
| 2022-06-25 03:43:19 | http://cpziu.com/naot/ipleaavteact | Offline | aa Qakbot qbot TR U523 zip | Cryptolaemus1 |
| 2022-06-23 13:06:14 | http://cpziu.com/naot/mnauimci | Offline | aa qbot Quakbot TR | Anonymous |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-06-25 05:12:17 | 8ac4e50e3d0a07d1715956cd2374cf33735b2c49de4ba0c85d4f6c00cdab7774 | zip | ||
| 2022-06-25 04:39:29 | 325f794d669e5549d9a99fe77ca63af9d55b193cb75606754f521a0111f5a779 | zip | ||
| 2022-06-24 19:52:28 | 91514ae873468adb3c8815addc15ffcb07cf37ba4c8b74e5a24acfaa24a4d921 | zip | ||
| 2022-06-24 13:48:52 | eeacc3e6bd023cbc69959f966b51e3814c87cf1b311fd483b988abdb858c5377 | zip | ||
| 2022-06-24 07:43:50 | a70926436d28c3a4869633ec8cd2560e3f97eebc1f1e8917f941d03a46ca0912 | zip | ||
| 2022-06-24 01:42:55 | ba7b4598d244f24c2e17b990091c8f2b5ecf4968128aab396ded12950f35dbe0 | zip | Quakbot |