URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-09-21 16:38:12 | 162.0.215.7 | premium181-1.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-09-26 15:07:07 | https://gloacademic.com/nfci/ | Offline | IcedID | |
| 2023-09-26 10:04:12 | https://gloacademic.com/teso/ | Offline | DarkGate | |
| 2023-09-21 16:38:13 | https://gloacademic.com/iust/ | Offline | DarkGate |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-09-27 15:10:24 | 1806c6ddb8deab89ddfe385180798537fc44bf3aacd949b8f1786f0316f3e6b9 | zip | ||
| 2023-09-27 03:09:29 | e853956b0d1f56b8e9494db883393062b5a8d9c437306b45b411eaf75c2763d8 | zip | ||
| 2023-09-26 15:08:21 | 108bc133e21a821e17e352334b09be48a98fb0ed297b72590bc7bc57a6375e2b | zip | ||
| 2023-09-26 15:07:07 | d9a7de0a941c7a19e7e952e7993c2dc8b601aa0bdbb42319720b0f9127491455 | zip | ||
| 2023-09-21 17:55:58 | 305de78353b0d599cd40a73c7e639df7f5946d1fc36691c8f7798a99ee6835e7 | dll | DarkGate | |
| 2023-09-21 17:00:59 | 091b7c16791cf976e684fe22ee18a4099a4e26ec75fa145b85dd14603b466b00 | dll | DarkGate | |
| 2023-09-21 16:38:12 | 936159194eb4556c0a4e146e9aca2abd458330c921c473e95fffe07fd3a7bc01 | dll | DarkGate |
