URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-28 22:04:18 | 15.197.240.20 | acf3b736b777428f5.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | yes |
| 2021-01-20 13:26:29 | 64.37.52.138 | sun.nsjet.com | Not listed | AS33182 DIMENOC | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-01-20 13:26:29 | http://love.ivpr.org/u1oqp2.rar | Offline | dll Dridex  |  reecdeep |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-01-20 17:54:33 | f7c8f98516cab79befde56567a6c5023ffb9e096ebff140d96dcf6e77583d9b9 | dll | Dridex | |
| 2021-01-20 17:18:49 | d160b47e8ef2f76e25caee95595893d3f55986de9216ee247e7e48fcb90edf99 | dll | Dridex | |
| 2021-01-20 16:42:34 | e4191288a595ba5a8af0d6bf081d0963fbeb553c0667a343c7d217f2b65ddf4b | dll | Dridex | |
| 2021-01-20 15:59:14 | 9cdc32b5cd2fb375072d681b488fe5b40789e2c87d36044033579b0281ee35f6 | dll | Dridex | |
| 2021-01-20 14:11:43 | 791252fc4def3c4c3bdb270633ffc88c0e2cd8e8e8ba299825a83841a273e7dd | dll | Dridex | |
| 2021-01-20 13:26:29 | b9bb671587f2dad8a3df83d6bd0b7b8327edf93fadbefe8b6aa7eabe6698ae88 | dll | Dridex |