URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-01-29 18:38:18	211.144.33.238		Not listed	AS9811 DRCSCNET	CN	yes
2022-05-26 15:11:03	47.91.170.222		Not listed	AS45102 ALIBABA-CN-NET	HK	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-01-29 18:38:18	http://czsl.91756.cn/plugin/iasetup.exe	Offline	exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-06-10 19:00:25	b9f1d4ce310b75a1a1dd917a61c56a7fea2e226c17ac713c183c2d984286b932	exe
2020-07-02 19:00:35	879dc20210497421dfe616135f59215d44e7a383ec3009b2529fdf1cdd6c5da5	exe
2020-04-16 12:46:35	93fa9b0bb4386f769a5901bbe70f79b6baea6655beaa9a09e23f5496d32fab66	exe
2020-04-14 02:48:19	ff4bfaab308c10461b2f2324c14fc4f51f7d4cef97961b40b4568a845c4c49e6	exe
2019-07-15 19:00:17	9de1e83eb0e0c1f091635062873b2884a759a912ba210253b1cf37e0865030b7	exe
2019-06-26 19:00:22	f75a556f2d536a7d718076a102a4855f00e7922e64867e1fee8fef16f5f67714	exe
2019-05-15 19:00:14	f2bf01c4ff5b1ebea625f734626d88d1d5e57440f8b0fefe29492b8c819e52f1	exe
2019-01-29 18:38:13	65c1d6ac581446d3e242def64455c75697136add0d1780325f2269307478189b	exe