URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-09-01 06:19:09 | 154.41.249.80 | Not listed | AS174 COGENT-174 |  US | no | |
| 2023-08-12 04:41:50 | 154.62.105.158 | Not listed | AS174 COGENT-174 | US | no | |
| 2023-11-01 02:12:51 | 154.62.105.104 | Not listed | AS174 COGENT-174 | US | no | |
| 2023-09-22 07:06:50 | 154.41.249.128 | Not listed | AS174 COGENT-174 | US | no | |
| 2023-08-02 17:30:42 | 154.41.249.8 | Not listed | AS174 COGENT-174 | US | no | |
| 2023-09-01 01:51:51 | 154.62.105.177 | Not listed | AS174 COGENT-174 | US | no | |
| 2023-09-04 19:01:02 | 154.41.249.131 | Not listed | AS174 COGENT-174 | US | no | |
| 2023-08-25 05:22:56 | 154.41.249.185 | Not listed | AS174 COGENT-174 | US | no | |
| 2023-08-19 02:49:14 | 154.41.249.85 | Not listed | AS174 COGENT-174 | US | no | |
| 2023-09-15 10:28:01 | 154.41.249.71 | Not listed | AS174 COGENT-174 | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-10-09 13:02:05 | http://hdstatusvideos.com/codice/Informazioni.zip | Offline | agenziaentrate geo Gozi  ITA ursnif zip |  abuse_ch |
| 2023-03-14 19:03:27 | https://hdstatusvideos.com/connect/ | Offline | 250255 7710 agenziaentrate geofenced Gozi ISFB ITA redir-302 ursnif | abuse_ch |
| 2023-03-14 19:02:09 | https://hdstatusvideos.com/scarica/ | Offline | 250255 7710 agenziaentrate geofenced Gozi ISFB ITA redir-302 ursnif | abuse_ch |
| 2023-03-14 18:59:57 | https://hdstatusvideos.com/agenzia/ | Offline | 250255 7710 agenziaentrate geofenced Gozi ISFB ITA redir-302 ursnif | abuse_ch |
| 2023-03-02 12:38:27 | http://hdstatusvideos.com/impresa/Agenzia_Entra... | Offline | agenziaentrate BIG Gozi ITA malware stealer |  JAMESWT_MHT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-10-10 02:37:36 | 9edcc1b9a1982e9ec509cc3c75cbb9e8e371925687b679f3506f7b1606696608 | zip | ||
| 2023-10-09 13:02:05 | dacb6312eebe9c056ba5fd1c58ea0dd9c478021a7936f40cbfe09fc09efc391e | zip | Gozi | |
| 2023-03-02 14:18:36 | f52c313277246ccd81420797967aff0a7353fe0f6badc77817e842120072efbd | zip | Gozi | |
| 2023-03-02 12:38:25 | cfe6b53554aaf19a2adf3a64ac5133705d6529396de72a80f88a9446ed5ccc6f | zip | Gozi |