URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	mysalons.in
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-31 14:31:26 UTC
Total malware sites :	1
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-05-02 13:21:35	207.174.214.13	207-174-214-13.unifiedlayer.com	Not listed	AS46606 UNIFIEDLAYER-AS-1	US	yes
2022-02-02 01:02:09	15.207.66.124	ec2-15-207-66-124.ap-south-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	IN	no
2021-03-31 14:31:27	151.106.38.112	ns3152164.ip-151-106-38.eu	Not listed	AS34088 GDY-FRANCE	FR	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-31 14:31:27	https://mysalons.in/e6d423ks.zip	Offline	Dridex	sugimu_sec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-04-01 02:20:18	fdce1eff308b78fefc2ef730679bd5317620f3e3a52a695ebb3ad355663603c2	dll	Dridex
2021-03-31 16:43:12	52545ce7c36e648bc9d8e78cde413a0d2b7e45dc4084b28646191f73fe8a010f	dll	Dridex
2021-03-31 14:58:16	905565ca424f02d974d708893000738e52ba24cec6aee08b7e79205f5be9313e	dll	Dridex
2021-03-31 14:31:27	8bf414ba5ed64f349bd7216efb27a0ce89e71f6d89ae7a2c3614ec1c19f6aff2	dll	Dridex