URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2022-03-16 21:43:36 | 99.83.154.118 | a51062ecadbb5a26e.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | no |
| 2022-01-20 09:25:07 | 212.193.30.212 | Not listed | AS9123 TimeWeb-AS |  RU | no | |
| 2022-02-21 22:56:08 | 161.35.221.143 | crawler180-mongo01-441000c8.mongo.ondigitalocean.com | Not listed | AS14061 DIGITALOCEAN-ASN |  DE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-01-22 03:41:08 | http://hyseallng.com/jgdhtrg.exe | Offline | 32 AgentTesla  exe |  zbetcheckin |
| 2022-01-20 11:05:04 | http://hyseallng.com/VE7nbbgh32q026i.exe | Offline | 32 AveMariaRAT exe | zbetcheckin |
| 2022-01-20 09:25:07 | http://hyseallng.com/vamof9sYpMiAGyi.exe | Offline | 32 AgentTesla exe | zbetcheckin |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-01-22 03:41:08 | a8bb01acd5ad07a823a3319d806d4c8c43b5ba7ba32dc161ed8de9d89f0b28bf | exe | AgentTesla | |
| 2022-01-20 11:05:04 | 79e5689152f3865a8d93d733e56d120c129b338c3d1ee91b90f3eb4ff43f1622 | exe | AveMariaRAT | |
| 2022-01-20 09:25:06 | ac03f567e14404b2ddf31c86c09b7de8bd40b4bc49e9406d10fd54a6569f4a32 | exe | AgentTesla |