URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	karasidai.com
Domain registrar:	Namecheap
Domain registration date:	2018-01-11 10:43:25 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:15:14 UTC
Total malware sites :	1
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-03-20 22:10:56	66.45.237.114	eprius.com.br	Not listed	AS19318 IS-AS-1	US	yes
2021-10-13 13:15:20	185.61.153.76	host60-5.registrar-servers.com	Not listed	AS22612 NAMECHEAP-NET	GB	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:15:21	https://karasidai.com/ix79ixc2.rar	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 15:44:48	e93c4e7b5470d09a9c0e539aef7d5bbf3eb25c0252061ee26ae6c1d5cf39ab4b	dll		Dridex
2021-10-14 14:36:25	aad11583e607a6ab73716edac5c21c48fa198fdcd01539d6d38e03ffe8977645	dll		Dridex
2021-10-14 07:29:34	9bc7a09197b831cabb805ccf254287fa1dcf4f8d342d334ce6271028b0e3c645	dll		Dridex
2021-10-14 04:24:48	87b662dfb948c3463937f2545934e339e4cf141ec2235333d44b10e59bc3c76e	dll		Dridex
2021-10-13 19:51:23	27f86371b24ed6a3614bb16e1be2f0cd289ed7a11a392b8d2016f6e67b6ee69a	dll		Dridex
2021-10-13 19:00:25	9829e1b7094a2d346c7799d30836af2ad00e34dab2c5f5c9095b4fa0b3d8ba7f	dll		Dridex
2021-10-13 17:18:58	ded15c493ce4e69e8471bfd09e3a9851c41f7413ab9fa78736383a2d8a3420f2	dll		Dridex
2021-10-13 16:19:08	62d44aa6a759f895b73098258cf03502ea3b064b18b0b2a6ecdc10d95f4044fc	dll		Dridex
2021-10-13 14:57:23	f76c90a5708f67a3b24a5f28c134f027ce50e0cc4fba5f7445eb0c5ca14efc01	dll		Dridex
2021-10-13 14:39:36	04060d601dfa67e7729088edb8a9df313dbf6912948364d044c6964d95f61dd6	dll
2021-10-13 13:15:18	69b266a06229673e16bacf6fa94ffb8b4d8b662cec510d4c210c512d47a80327	dll		Dridex