URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	cucsur.udgvirtual.udg.mx
Domain registrar:	Akky Online Solutions
Domain registration date:	1989-12-31 00:00:00 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-20 13:54:28 UTC
Total malware sites :	20
Online malware sites :	0 (0%)
Offline Malware sites :	20 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-20 14:11:05	148.202.167.75	75-167.suv.udg.mx	Not listed	AS2549 Universidad_de_Guadalajara	MX	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-20 22:02:11	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	Dridex	Cryptolaemus1
2021-12-20 16:02:49	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:47	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:43	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:43	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:35	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:32	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:32	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:24	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:23	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:20	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:20	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:20	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:20	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:19	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:19	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:18	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 16:02:09	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	dll Dridex	Cryptolaemus1
2021-12-20 14:53:16	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	CVE-2021-44228 log4j meterpreter py	abuse_ch
2021-12-20 14:11:05	http://cucsur.udgvirtual.udg.mx/oa/2020/SisTur/...	Offline	22203 bin dll Dridex log4j	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-03-08 06:52:52	38f718205cc8a5fe8fe640cf216b53739342248d16716ceb5181ca5e1683c133	dll
2022-03-08 02:56:53	e6cd50dbb2cf8e5175ec056ce985233036bcb875d44afbcaffc8bf92ccaf65eb	dll
2022-03-08 00:53:37	1e0643d7adc52b5e6851678cad429900d46a67f0b16a99a587bfd59f1e618f53	dll
2022-03-08 00:34:09	f9a23f254b6c2c6b6483dec04767c402367c9c4a2af4537cb514f50e4bcca003	dll
2022-03-08 00:12:51	21095e32ac5e7ed9bdcc15e16b10410c6d471f17444f07c4a681dc154f2a9e65	dll
2022-03-07 20:56:41	ccb6e4b110a3fc778fabbfdb701d6b5b7c5d329290f6d3ab2bb65a44f0554ce2	dll
2022-03-07 20:49:39	f155baf76ee71dc3c84d695ab689083b65bccf3d2eddc96cc2d4d71dbfe536c7	dll
2022-03-07 14:51:04	450baf84f544b84804fe723fe2cfeb7b70d67a78e463e8ee4bb5442784a71810	dll		Dridex
2022-03-07 10:54:49	aeeac05755dc420066a69e28edd08d6608c967920c5c89415bfa061e3a907846	dll
2022-03-07 04:52:15	4146660a36616e3635caf01e5823ba2f0448cc71b9d752dd38d00fe8279c6610	dll
2022-03-07 03:00:05	b11ba02443a2c7a9362300b799bc74016f06694de33622ea26970db330e556ea	dll		Dridex
2022-03-06 22:58:32	64e5e6e98732308f96c85e2bdca8a8a6fd43378e428df60f478ade9b8bc6c92f	dll
2022-03-06 21:10:49	b8ec2f684641cd0d2bdf10ac2cb2594588f142e00b6495aebbce3862d66f58e2	dll
2022-03-06 18:46:41	0ffc632e081fc06fb2625f19e29b2ed3a7f593af23c2b5872aa70a822d1c316b	dll
2022-03-06 17:15:46	f5f0344af449851a38fdbe3a962bb4d5a9a60afe80d2e54094e69cfcbf1262a1	dll		Dridex
2022-03-06 16:53:40	9e8385eb9be5a30635dcc283a5d9608fdaa5d9a56a1d4ea9af79e4bc0e414ed6	dll
2022-03-06 14:58:34	499d821999ed58bdd5b72648e4f689c2b1b384a4902d6c924f177e0260234ee6	dll		Dridex
2022-03-06 12:51:25	1cff8b4891ba37152059c447ae46415e1b17b0c05b0d7085b97b7867669bafd8	dll
2022-03-06 10:45:57	c64a673ddbe30dbf860d828a91a36addc34420cc0cedf479d024eb0710da7fbf	dll
2022-03-06 10:00:28	e990e24958733e0f5ed1f8a466e506664cf68611afed18c004361770683fb387	dll
2022-03-06 09:07:23	dc835070d4416093f6e473f976f2614f476616ab0afbbe8f7c84102fa3687ef2	dll		Dridex
2022-03-06 07:08:20	5fe5f34f2da51c24527d964ae0c9f1064e88ee23bfbe78050b8ad73406fec596	dll		Dridex
2022-03-06 02:59:02	20d21f1c96d4a79eb40a0eb98076205473eb388afe220eb627bd98e9bad83a19	dll		Dridex
2022-03-06 01:05:00	8fc682c71b6732dae19bb5d5d7f9ccf1a786272efedd4364ad53017d7c1b35cc	dll		Dridex
2022-03-06 01:00:37	37550681412924e9bbbaf752760fdf727f93a194fa8b4f2857fa161a6feb0d8c	dll		Dridex
2022-03-06 00:27:27	12a53014ca09b20465133160c8c52db7dfaff21b9cdaa4f4a8801b28228f51af	dll		Dridex
2022-03-06 00:14:24	99d12ed1e4fab6ced68b2fa0daba010ea0b6776751a26df8ff55e46ced58acef	dll		Dridex
2022-03-06 00:12:50	8032d1916e1f96c1c7cbcf109d77be836b77140140d6d31b4cdd331048971ecc	dll		Dridex
2022-03-06 00:04:59	12a53014ca09b20465133160c8c52db7dfaff21b9cdaa4f4a8801b28228f51af	dll		Dridex
2022-03-06 00:04:40	1e06af8a38fe0fe7c02a6e198473f77e7e3da505f256da340618f0931f861445	dll		Dridex
2022-03-06 00:02:25	70e86ae5c85e0d838f7c9816fdb6e0c02111ceb1e74fb48030a149fcdb97eab7	dll		Dridex
2022-03-05 23:55:56	45d8f8ceeef0961de44940138d877d7b9715f15c1cb1a924488f8fe974652cb6	dll		Dridex
2022-03-05 23:54:02	1e192d5032e856606cb3d85ba307a085e483b0ee0dcc6adcdfabbe54598bf3c0	dll		Dridex
2022-03-05 23:53:17	d77ce46ed26ecac38937a242189538c27a02a1256e28e332a5c0b02a06ca2a89	dll		Dridex
2022-03-05 23:53:07	4c8bd253b03c697ba7677f0386c4464c27aa3a8338e9af825b25e193fb40e2ee	dll		Dridex
2022-03-05 23:52:21	cb1c70b22d83ea5daf03246ab5f6316d482b2d690b92e7b5298448d1634c6340	dll		Dridex
2022-03-05 23:51:55	16da80f7cabe57173e67fa1341235fd3254149612816ca2207186fc7979ff819	dll		Dridex
2022-03-05 23:51:34	0b9b9937c34df38fe156e420b908534946c6d0b13c9b9c49ee973cf6963fb205	dll		Dridex
2022-03-05 23:49:51	b54b5a99896666ff046d1fc9894a4aa6c0b5e52091835143cb01406c208deec5	dll		Dridex
2022-03-05 23:37:09	1961efeeec764f8033d5b5bd587cf2ea62cddd0c211b7c154bbe5d961e0ebc4b	dll		Dridex
2021-12-20 22:02:10	3836ff75d10503ebe92c4149ec1a1cbacc530cf1c6cb11a28b293f9a8c41e2e5	dll		Dridex
2021-12-20 16:02:48	176d3e38c6782bf313d6d5f23a14f2e7692181ee50a7b2a2b130caae82e46148	dll		Dridex
2021-12-20 16:02:45	c13443798f618fba8cbfe70c4b39e165e0d88dbcb9eaadcb8329536c13ce5e0b	dll		Dridex
2021-12-20 16:02:43	b33f7632696b48108f33d008571fb9a28c9f2ed74ad883fdc70d385e2b861391	dll		Dridex
2021-12-20 16:02:43	27b24d442413bdb408f7d2e09f440a5fba2d5b2bf22ed2a99562c09dc3234fb3	dll		Dridex
2021-12-20 16:02:33	0e5c5fd9dbd9877538234f46af9f9ad2bed5561f5fda9c2de019272741d4c208	dll		Dridex
2021-12-20 16:02:30	85890ee7659c717dfbddc97ffbcd01b495d3a28c728b35cf1cd6ac1ebd306c92	dll		Dridex
2021-12-20 16:02:30	9cc6cd5090a8743baea0c5b3b7227208b9fd21e0317263fc84209a56b99371d2	dll		Dridex
2021-12-20 16:02:22	2af7a19afa51d819cfe4bcead0aa63c4dbb9c1194363896500b0ef626908ca13	dll		Dridex
2021-12-20 16:02:19	fb87ecffae6e8a3070c7db5e0998c65cce7539a6efcb34fde24168b559dff71c	dll		Dridex
2021-12-20 16:02:18	b33f7632696b48108f33d008571fb9a28c9f2ed74ad883fdc70d385e2b861391	dll		Dridex
2021-12-20 16:02:18	ecf2b2f6e49da5476eddead4ea6b32ef39d3b1989ed1c5fb46e90f114f9ea302	dll		Dridex
2021-12-20 16:02:18	6805b96efa556df82f22e5c3a426f9d6040949dbf0c3c6fb489c2812464aa6b6	dll		Dridex
2021-12-20 16:02:18	3bb445d4ffac94906e3a834b659d7adc1f18dc7b9c9196c38b353937f1381278	dll		Dridex
2021-12-20 16:02:17	634e08b7594849fcd37698e668e7c3bcc8aa5af3cc1dac488bdb19c722a6bce0	dll		Dridex
2021-12-20 16:02:17	a96a439e987fc1d63d5c59abf9e0055baf6b163f7e295b3603a64f3cb00413a6	dll		Dridex
2021-12-20 14:11:03	c4ac66cd26e9c6880438022aba95a5cfe87fe47ecc326c2f1d508a036476ad60	dll		Dridex