URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2022-01-18 13:56:05 | 172.67.220.233 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2022-01-18 13:56:05 | 104.21.94.77 | Not listed | AS13335 CLOUDFLARENET | n/a | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-01-18 13:57:04 | https://kubetgame.online/wp-content/1QSqjusFskX... | Offline | emotet | |
| 2022-01-18 13:56:05 | https://kubetgame.online/wp-content/1QSqjusFskX... | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-01-18 14:46:30 | ec527c59ba416c8eda361c7069ac38bf84ee678c4b0b0c60588711a172a8d8cc | xls | SilentBuilder | |
| 2022-01-18 14:33:56 | 7ff7872e83522e607e0795de63cbbdce9440358acb4f994d4655f52c49fc5d4c | xls | Heodo | |
| 2022-01-18 14:20:06 | 4a1f0312b2fd859957bda97b5cd2cb465ef5f9fea28798450bef3186cb1a8439 | xls | Heodo | |
| 2022-01-18 13:57:04 | caebbc535a125c91b79a6b925fbf1a9fb4446ad1bc5918e1bd11a39b14b55d3a | html | ||
| 2022-01-18 13:56:04 | 722ded1cbcabef90968fdf9be67676481bac9dd847289d7f23e7625a66087723 | xls | SilentBuilder |
