URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	itadlearning.com
Domain registrar:	Dreamscape
Domain registration date:	2014-06-09 05:17:58 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:15:05 UTC
Total malware sites :	1
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-03 16:24:50	104.21.61.95		Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-12-03 16:24:49	172.67.208.150		Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-10-13 13:15:14	192.185.194.141	192-185-194-141.unifiedlayer.com	Not listed	AS19871 NETWORK-SOLUTIONS-HOSTING	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:15:14	https://itadlearning.com/o1ar5b0.rar	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 15:22:27	63b166d743b92d781ffb3dff55c0c8b56868d66b3862b9e3a2f45b05a4fe4872	dll		Dridex
2021-10-14 14:38:49	5ecb1e66ac878a06512c21e9c15de371b2042415ac4a075b864de7d477a33308	dll		Dridex
2021-10-14 07:57:11	baa90f27ddbfdafb49acbcb9ec5fa5f1309c18bb4825946b644e090f09f5c8dc	dll		Dridex
2021-10-14 04:12:21	4d3433772fd42addec5c3ac9955d0a7f4d8e0fe96b31155bf3c3f86f76b9139d	dll		Dridex
2021-10-13 19:52:29	4f0e97fdde16ed4e2eb90d8e3ba0d0a23ddec9375f730d28476c4faf0629a0fe	dll		Dridex
2021-10-13 19:11:19	04f128c51e38777fdb38bef266ce2288d7cea4d2b47a82facdbad9b667e27a01	dll		Dridex
2021-10-13 17:20:51	11a796292aced5a713251ae6da4329fc6bea7b6e843a8ae493c7db4a2a862181	dll		Dridex
2021-10-13 16:27:55	6a6431cd19cfe09e85486f3232ddbbb560e7fefe4f9b7f7b46a4d0dd372d6c42	dll		Dridex
2021-10-13 15:02:40	f76c90a5708f67a3b24a5f28c134f027ce50e0cc4fba5f7445eb0c5ca14efc01	dll		Dridex
2021-10-13 14:35:11	6d5675bcaae40f069f0179c0a7302062d2b786b5bd437d2a913b058e6d053196	dll		Dridex
2021-10-13 13:27:00	a2c1142a25a5081b3ead3280a8f4405d5781032e556904a66196f2c7a3d27268	dll		Dridex
2021-10-13 13:15:13	59ac53dd8926fd3118d03d2e71d7fba56d132303ce30e9ca85f28fd729af700a	dll		Dridex