URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-09-11 07:36:29	84.38.181.162	na1i2.ru	Not listed	AS49505 SELECTEL	RU	no
2020-09-10 09:16:04	8.208.89.41		Not listed	AS45102 ALIBABA-CN-NET	GB	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-09-10 09:16:07	http://loaadkkkk12.top/downfiles/6.exe	Offline		JAMESWT_MHT
2020-09-10 09:16:06	http://loaadkkkk12.top/download.php?file=6.exe	Offline		JAMESWT_MHT
2020-09-10 09:16:06	http://loaadkkkk12.top/downfiles/4.exe	Offline		JAMESWT_MHT
2020-09-10 09:16:04	http://loaadkkkk12.top/download.php?file=4.exe	Offline		JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-09-11 08:27:21	26582650094928021ddae6ff1535a5730d0bbbc35a2292660d33b1964fba0ce7	exe
2020-09-11 08:21:55	198a4408b6ee2f54311852177283c165366c4df25ffa920f863d51e35d7d2fa3	exe
2020-09-10 19:46:58	d51930e58e665f4a07b366b1b1f36537de6b1f0a998fae688165dec323233ed4	exe
2020-09-10 19:44:19	14cccfdfec5ad5bb0a8c12e1c07c2dc92a21c3171b5bdc1ed026bad21611d0b7	exe
2020-09-10 12:10:55	8cb44987ef8a6288db694b5f95d96d92826a65085eb44fb535d1b9035fbd2a24	exe
2020-09-10 09:16:07	51c53576e439424a479865f5b9c19288f4ba48743b513cd3ead582d0cc647187	exe
2020-09-10 09:16:06	b99887f1364955d2872bedadab15a15a51429ec8aeb111859d50e24a9fd31342	exe