URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: jhj10jtvwu03zsjwk.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2021-03-04 15:22:07 UTC
Total malware sites :1
A record(s) observed :4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-03-18 06:52:12 35.228.48.2727.48.228.35.bc.googleusercontent.comNot listedAS396982 GOOGLE-CLOUD-PLATFORM- FIno
2021-03-08 17:29:32 8.210.31.137Not listedAS45102 ALIBABA-CN-NET- HKno
2021-03-05 00:28:54 8.208.97.177Not listedAS45102 ALIBABA-CN-NET- GBno
2021-03-04 15:22:10 34.89.57.175175.57.89.34.bc.googleusercontent.comNot listedAS396982 GOOGLE-CLOUD-PLATFORM- GBno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-03-04 15:22:10http://jhj10jtvwu03zsjwk.com/inda.xlsOfflinedll IcedID ext Qakbot ext qbot ext SilentBuilder TR lazyactivist192

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-03-19 15:11:0541b9863c45245876aab05824d58c2a130871f806085db4d9311f857cabab1667dllIcedID
2021-03-19 05:13:483fca3f2d46add510a32d81b2ba8b4a5f30fc8ec25eca34175405bf5580a1bec3dllIcedID