URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	marfra.ottimosoft.com
Domain registrar:	GoDaddy
Domain registration date:	2017-06-12 03:01:58 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:15:15 UTC
Total malware sites :	1
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 15:12:26	192.99.84.44	opal.dongee.com	Not listed	AS16276 OVH	CA	yes
2022-01-10 03:04:56	198.50.155.236	opal.dongee.com	Not listed	AS16276 OVH	CA	no
2021-10-13 13:15:22	107.180.126.166	166.126.180.107.host.secureserver.net	Not listed	AS26496 AS-26496-GO-DADDY-COM-LLC	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:15:22	https://marfra.ottimosoft.com/w530d0u.tar	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 15:02:41	5bc5e163eb9c79c7fec76b1adc04d74460bbd2d0897fdd76af282baa5b07b442	dll		Dridex
2021-10-14 14:33:53	95a4885068a795c1461a3d0e5602042ba9d1f809d94442bd89fb46a1961c89b3	dll		Dridex
2021-10-14 07:07:05	8841632d649ce7a2d74544a90adb5610eab42324f45eb63c3655e438d6bf8111	dll		Dridex
2021-10-14 04:18:31	e6e11378cd641ce0ec075db2564b4a158c34e36b8beb11c0d38d236f5744b016	dll		Dridex
2021-10-13 19:56:32	e11b7b074a05e563e6dc7db463bad2edc69902777e88f79e4851ff0eca9c947a	dll		Dridex
2021-10-13 19:02:02	e0ec9e2fc8fa51382c02913bf365b80fdbb5d57e694a6f8aa47b65ee50102b4f	dll		Dridex
2021-10-13 17:23:41	426b5c4332e09b331eeabd7a4338c58a275fc0a6d99547a27b4c3e5c47182c95	dll		Dridex
2021-10-13 16:06:39	7ab24453e040b90ec8d8389737ca6968a35ec24a28e494b97eb9eb770c90e8b2	dll		Dridex
2021-10-13 15:13:11	7d938aefd1e3971b1b135badfae052ea71a3be5b0b9a74756717702fcc886e1d	dll		Dridex
2021-10-13 14:50:00	4061a376c81071e9c54fae9d0e3e924ad57ffa734f25066c9c655319fae367f7	dll		Dridex
2021-10-13 13:37:15	c72fa2296308b8500ddb8c345035befee0711451d1272df8b6762c608e0cfb82	dll		Dridex
2021-10-13 13:15:22	99dfcde4f61579e52164bee9c1078b50f84c8246d86c68ff0c8352df88032d66	dll		Dridex