URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-03-29 14:58:06	162.241.169.27	162-241-169-27.unifiedlayer.com	Not listed	AS46606 UNIFIEDLAYER-AS-1	US	no
2022-11-20 12:52:29	74.119.239.234		Not listed	AS46606 UNIFIEDLAYER-AS-1	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-29 14:58:06	https://naeemacademy.com/w36sfdr.zip	Offline	Dridex	sugimu_sec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-03-30 15:36:23	0c197468076c14f7b6c4fd095009ff628970f2c8d408131f7afd306b5e65eedd	dll		Dridex
2021-03-30 07:17:15	a5b1464925eda8a81b2fcc68e22940c778a91861045537a9bcd1a16af0e511a0	dll		Dridex
2021-03-30 03:29:38	2f95344e5e43861fd9d4d890dd49b7a1401e3d98c7308b5f45702c2c9e45d56a	dll		Dridex
2021-03-29 19:51:33	006e592f760a87219ad92ca26582ac07d3b3e71f9f529396266c310e893e634e	dll		Dridex
2021-03-29 19:11:41	ae3b7d160b7b7389b413ad2cc8787f5b92013627476a1cb2a3371712b07cd28e	dll		Dridex
2021-03-29 17:57:55	a83f728a3db75ce6298a72f1b5c5b92e91846af9986e6d936a5737e490ef23f5	dll		Dridex
2021-03-29 15:58:35	c8e7d61a95193e121433b77c045d78b4b4ff94fd92af379ab9549e672148f5a9	dll		Dridex
2021-03-29 14:58:06	7ec6d4c4d98a1901c2a64bea8f5e1ca476ea85d6d52a6d6810531f56387e7859	dll		Dridex