URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-05-17 20:48:39	67.215.234.162	out40.goodbargainsbuyer.com	Not listed	AS36352 AS-COLOCROSSING	US	no
2019-11-05 09:15:05	63.143.47.50	50-47-143-63.static.reverse.lstn.net	Not listed	AS46475 LIMESTONENETWORKS	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-03-23 14:18:21	http://darco.pk/asus/New_product_encrypted_CF2A...	Offline	AgentTesla encrypted GuLoader	abuse_ch
2020-03-19 14:11:09	http://darco.pk/asus/Susihe_encrypted_FC2BDEF.bin	Offline	encrypted GuLoader	abuse_ch
2020-01-13 06:43:40	http://darco.pk/scan_copy.exe	Offline	exe	abuse_ch
2019-11-05 09:15:05	http://darco.pk/BCyph_test_app.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-03-23 14:18:21	bd3eac50ea079d1515ffe7924af1a6476a2c051bc186354cec0b9c251e6c5d0a	unknown		AgentTesla
2020-03-19 14:11:08	fa6fb6c354116cba1b0e8a50dfa4ef9c22bcf86e0b52c26cb03f7c2d6eb8ed8e	unknown
2020-01-13 06:43:40	0a18c54ef5b8b05137e9fbb43920e8f06968052d31ae5f14c753e48cb4a84bca	exe
2019-11-05 09:15:05	fb646145af496d6e8b093d29de1f65d644ec40deb2610b4c96b5c4639e19b331	exe		AgentTesla