URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | feedeposit.uob.edu.pk |
|---|---|
| Abuse complaint sent?: | Yes (2023-08-02 12:45:01 UTC to staff{at}pknic[dot]net[dot]pk) |
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Not blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2023-08-02 12:41:07 UTC |
| Total malware sites : | 5 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 5 (100%) |
| A record(s) observed : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-08-02 12:41:10 | 121.52.157.123 | usindh.edu.pk | Not listed | AS45773 HECPERN-AS-PK |  PK | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-08-25 07:34:11 | http://feedeposit.uob.edu.pk/6a8ifVD8qEneo.exe | Offline | AgentTesla  exe |  abuse_ch |
| 2023-08-22 12:22:10 | http://feedeposit.uob.edu.pk/TpuLrsiSQ3light.exe | Offline | AgentTesla |  James_inthe_box |
| 2023-08-14 14:04:07 | http://feedeposit.uob.edu.pk/C1pNaIqyfDshEdy.exe | Offline | Formbook | James_inthe_box |
| 2023-08-05 07:06:44 | http://feedeposit.uob.edu.pk/ekr8L6VCw7MAc.exe | Offline | AgentTesla exe | abuse_ch |
| 2023-08-02 12:41:10 | http://feedeposit.uob.edu.pk/0TTYuKFFp2Neo.exe | Offline | AgentTesla exe | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-08-25 07:34:11 | e7295b52154e11dd513f0000ce1cad87b2d2d5a0f674bea0b82bc6f84e1928bb | exe | AgentTesla | |
| 2023-08-23 05:02:06 | 0a4a7a50775ee0340b266a0cf361db051bcff7a352a60525d2f733e9444ed7d6 | exe | AgentTesla | |
| 2023-08-22 12:22:10 | 49b2e08cf7fb9bceaf2721ef24c9ab795c984403c258af9df3914dee1f3225a0 | exe | AgentTesla | |
| 2023-08-14 14:04:07 | afff63cf4baca4e2a5f58803754843aca7c75437c0cd7b0cb6b60efb72692fc9 | exe | Formbook | |
| 2023-08-06 09:59:59 | b665c10dcc5cbf5d062c9463e775fbb6ae997f357a0349370fa6dd56718a2d73 | exe | AgentTesla | |
| 2023-08-02 12:41:09 | 2e4548a3744c45b01a65b8523d08f044ecf9e1cba90f3e792d3894d5c72dbabe | exe | AgentTesla |