URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: mysetup2.s3.ap-south-1.amazonaws.com
Domain registrar:MarkMonitor -
Domain registration date:2005-08-18 02:10:45 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2022-09-05 11:54:03 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :282

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-09-07 15:21:23 52.219.156.90s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INyes
2022-09-08 21:51:34 52.219.64.127s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INyes
2023-04-07 10:10:21 3.5.208.129s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INno
2022-12-11 05:06:02 3.5.213.145s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INno
2022-11-29 11:07:27 52.219.156.22s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INno
2022-09-06 04:01:31 52.219.158.106s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INno
2022-09-06 07:42:20 52.219.158.150s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INno
2022-09-08 17:06:24 52.219.160.150s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INno
2022-11-02 16:06:56 52.219.66.3s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INno
2022-09-05 16:40:58 52.219.66.55s3-r-w.ap-south-1.amazonaws.comNot listedAS16509 AMAZON-02- INno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-09-06 05:50:06https://mysetup2.s3.ap-south-1.amazonaws.com/UN...Offlinedropby PrivateLoader andretavare5
2022-09-05 11:54:06https://mysetup2.s3.ap-south-1.amazonaws.com/2A...Offlinedropby PrivateLoader andretavare5

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-09-06 05:50:069b4f7d0163558187ebe95edd5cdfd86adf987e35327f37548bb6712ad3f7d782exe 
2022-09-05 11:54:067c57a653eca3197424fc352d42e80b183df11382a666e6842d328bfb5d64ca82exe