URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2021-12-14 15:25:44 | 178.218.218.144 | space1.unassigned.ru.eserver.net | Not listed | AS42244 ESERVER |  RU | no |
| 2021-03-16 06:39:05 | 109.248.11.252 | Not listed | AS204490 ASKONTEL | RU | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-03-16 06:39:05 | http://hathunterist.ru/DSC_Canon_023945_23.12.2... | Offline | Gozi  RigEK ursnif |  nao_sec |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-03-16 08:09:13 | aa8a59aaed89dd7c8696a7d63fa2763689be023a4a7692f63d950d8b923b6154 | exe | Gozi | |
| 2021-03-16 07:30:43 | d1a663e971ebd68e92027925d3a4f39e928aae3986ccea4766653b0ba724c826 | exe | Gozi | |
| 2021-03-16 06:39:05 | 6972f369e30b24143d8e325f7b6182fee28edfd884e85693977340af77083731 | exe | Gozi |