URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-03-31 19:14:41	45.66.158.126	126.158-66-45.rdns.scalabledns.com	Not listed	AS18978 ENZUINC-US	US	no
2023-03-23 06:21:10	104.21.48.158		Not listed	AS13335 CLOUDFLARENET	n/a	no
2023-03-23 06:21:10	172.67.154.82		Not listed	AS13335 CLOUDFLARENET	n/a	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-03-23 06:21:10	http://ji.jhia6gy44dd.com/m/ss47.exe	Offline	exe fabookie	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-03-30 20:07:20	3e81789659a8623bc23c25a8010057f9fca72e5c853b1a874c7e6183f7cdf12a	exe		Fabookie
2023-03-28 17:52:25	4a6b10636d9b2e8d224fe2c137592e1be01cbaf5b9b2b4d7dacb7a96edd7d7b5	exe		Fabookie
2023-03-28 10:45:36	80da4c81dc96eedadac2765885a111e441d956803cd4a85d8f7458dd5464eece	exe		Fabookie
2023-03-27 10:32:41	5b6a3b0e00cae8eb8d49dc47681632844778e948283dad2c3f89d826d9eca780	exe		Fabookie
2023-03-26 04:44:38	c73421f08cc2983e98378f1998eb9c7097be5d5c66d31b2f71367bfe861cf4d5	exe		Fabookie
2023-03-24 13:42:32	e5f399d301ce1d2cf5fdb3664d93017ef32847651277461a69b1c254f81d601e	exe		Fabookie
2023-03-23 18:10:20	4ce00d8852d8faa23e7722e142ac29ebea94e678c6bdc48120cd98afe843fb26	exe		Fabookie
2023-03-23 06:21:10	43e4574bbe757104766b7299c8ebf76026f0932b079e6a0ecd4325f6c0ddb36f	exe		Fabookie