URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: distribuidoramc.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2021-02-05 15:04:03 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :21

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-10-02 03:51:26 18.116.226.211ec2-18-116-226-211.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USyes
2021-10-10 19:50:58 3.140.94.226ec2-3-140-94-226.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USyes
2021-10-08 02:48:30 3.130.37.98ec2-3-130-37-98.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USyes
2021-09-26 17:22:08 18.189.203.77ec2-18-189-203-77.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno
2021-10-13 05:15:02 3.130.243.177ec2-3-130-243-177.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno
2021-07-26 02:27:33 3.133.163.136ec2-3-133-163-136.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno
2021-09-22 23:46:14 3.13.103.114ec2-3-13-103-114.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno
2021-07-26 02:27:33 13.58.168.69ec2-13-58-168-69.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno
2021-09-02 01:30:53 3.139.183.122ec2-3-139-183-122.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno
2021-07-22 11:57:28 3.130.158.209ec2-3-130-158-209.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-02-05 15:05:08http://distribuidoramc.com/ds/0502.gifOfflinedll Qakbot ext qbot ext Quakbot ext SilentBuilder TR lazyactivist192
2021-02-05 15:04:06https://distribuidoramc.com/ds/0502.gifOfflinedll Qakbot ext qbot ext Quakbot ext SilentBuilder TR lazyactivist192

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-02-05 15:40:347b338c9afc864fa9b2cda3591c494e9ac81d0a4e54161ffa966a10005c634528exeQuakbot
2021-02-05 15:04:067b338c9afc864fa9b2cda3591c494e9ac81d0a4e54161ffa966a10005c634528exeQuakbot