URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-06-14 09:02:22 | 154.26.134.246 | vmi1301530.contaboserver.net | Not listed | AS141995 CAPL-AS-AP |  SG | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-06-14 09:02:22 | https://durgaschool.edu.np/ou/ | Offline | BB32 geofenced js Qakbot  Quakbot USA |  Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-06-14 23:12:00 | e29111a118a0736ef9e261fe755650e9dcd7d21e3ed9a2021ea64a6305b22fc4 | js | ||
| 2023-06-14 13:37:00 | 80272b2fcb9a21d89995740bb204f41c745f6f798d9e60b9c11ae9dac04c0a25 | js | Quakbot | |
| 2023-06-14 12:38:58 | f8f161c134801f3af15d22830d7207e40cbd9beaca682d8d145ad5f39e4e9dfc | zip | ||
| 2023-06-14 11:20:31 | f666a788127bf2f9889af7487b05343a3bd70aac5e1422f3d072c6c7a2f5f1eb | js | Quakbot | |
| 2023-06-14 09:56:59 | 42b31fe5a77e209f37695096e10cb6df9227c390bad3734874acd650011ce994 | js | Quakbot | |
| 2023-06-14 09:02:22 | 2a406608a0ffaba2656cf5879e23dfbe00108787515fb0cf28a1f28ba8b06c94 | js | Quakbot |