URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	gjaosihe.nmvhpedn.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-10 12:57:07 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	9

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-07-13 13:34:44	72.52.178.23	lb01.parklogic.com	Not listed	AS32244 LIQUIDWEB	US	no
2021-04-29 08:19:23	99.83.154.118	a51062ecadbb5a26e.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2021-04-25 19:29:57	198.54.117.197		Not listed	AS22612 NAMECHEAP-NET	US	no
2021-04-25 19:29:57	198.54.117.198		Not listed	AS22612 NAMECHEAP-NET	US	no
2021-04-25 19:29:57	198.54.117.199		Not listed	AS22612 NAMECHEAP-NET	US	no
2021-04-25 19:29:57	198.54.117.200		Not listed	AS22612 NAMECHEAP-NET	US	no
2021-03-17 10:34:00	88.218.92.148	148.92-218-88.rdns.scalabledns.com	Not listed	AS41111 AS-GEOHOSTING	US	no
2021-03-10 12:57:10	104.21.73.5		Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-03-10 12:57:10	172.67.136.211		Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-18 14:27:06	http://gjaosihe.nmvhpedn.com/juuu/ufgaa.exe	Offline	exe	zbetcheckin
2021-03-16 15:27:06	http://gjaosihe.nmvhpedn.com/iuww/jvppp.exe	Offline	exe	vxvault
2021-03-10 12:57:10	http://gjaosihe.nmvhpedn.com/iuww/huesaa.exe	Offline	exe	vxvault

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type
2021-03-23 02:24:56	97fe546f4790b24b92895fd102ab528c84187dde94b00e4efc16e78dba9f80a4	exe
2021-03-18 14:27:06	8650cbdd1c6fe261f7329a9564200ebb0e347ed75f1576e60612c8ac710166cb	exe
2021-03-16 15:27:06	2b735e5e7f0f67771ba0f04545a9587b99e2b0093cfda2413c833bb333d00dff	exe
2021-03-10 12:57:09	e27fe72920360973cd116caadff51ef457a090c5ca680c860999a8b195c669e3	exe