URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	dreamchildapp.com
Domain registrar:	GoDaddy
Domain registration date:	2018-08-04 08:27:41 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:14:08 UTC
Total malware sites :	1
A record(s) observed :	11

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-28 22:33:41	13.200.165.36	ec2-13-200-165-36.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	yes
2022-12-09 06:09:26	15.197.142.173	a4ec4c6ea1c92e2e6.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2022-12-09 06:09:26	3.33.152.147	a4ec4c6ea1c92e2e6.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2022-11-20 08:04:34	188.114.96.3		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-11-20 08:04:34	188.114.97.3		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-07-03 05:23:32	104.21.59.229		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-07-03 05:23:32	172.67.184.212		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-07-12 05:11:54	188.114.96.2		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-07-12 05:11:54	188.114.97.2		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-05-01 19:20:04	68.178.226.192	192.226.178.68.host.secureserver.net	Not listed	AS26496 AS-26496-GO-DADDY-COM-LLC	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:14:19	https://dreamchildapp.com/y62sc87.jpg	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 07:08:10	fe536e8e8894d955fb8b9fe6fa91413f7e83a4252f457a4c771d1a808d137b8d	dll		Dridex
2021-10-14 04:13:03	9f25ca343d8ef13ad108a42ac289397bdb9fe50ab42519e351d9020045767ffd	dll		Dridex
2021-10-13 19:56:41	2d24c0e1962483edddd52784cc06d666d58d06a1e259c57e26982f284c084605	dll		Dridex
2021-10-13 19:13:02	17de50a0f26b28ca1202553e74acdb2bf3efa327c68f83c90fc1c97352266a2c	dll		Dridex
2021-10-13 17:29:09	0d002228f1c316bbeb0df23eb1af59353764670a4573520b6756fe1b100e2447	dll		Dridex
2021-10-13 16:28:58	7d3fc28d5d1b2d09f29f2ac2903991dfdbcd02649df703926cc3a37893678350	dll		Dridex
2021-10-13 15:00:46	e16c031ec8a6e48fae645ca72964343f033c2597476c5b0999ef94316ae7ce7f	dll		Dridex
2021-10-13 14:45:20	8d9b81f42b50773deff8aabd7ad7352cef3dcabe2e87dd0af61cc7e0053caf25	dll		Dridex
2021-10-13 13:14:18	708772002783922cd42ebaa4e1471fe0bedfdecacb99d98925483317e09c9994	dll		Dridex