URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	nandy.ottimosoft1.com
Domain registrar:	GoDaddy
Domain registration date:	2019-07-19 18:26:32 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:14:41 UTC
Total malware sites :	1
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-01-17 09:15:54	51.79.35.164	airini.dongee.com	Not listed	AS16276 OVH	CA	no
2021-10-13 13:14:48	148.72.0.122	122.0.72.148.host.secureserver.net	Not listed	AS398101 GO-DADDY-COM-LLC	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:14:48	https://nandy.ottimosoft1.com/vyn4doxcl.tar	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 07:16:42	929dbc215486e62939ea285bd957d04705b55ebae6604674381a2b21345b8f7b	dll		Dridex
2021-10-14 04:26:35	c7bfca1ae6e34a4fc631c0a1ebcfefb9d72122ea5cdb2f9311809502bd944cec	dll		Dridex
2021-10-13 19:54:24	c8adc85bc99f52a98ab85ababc361bdf0d14f18bc201346d17548983a135e080	dll		Dridex
2021-10-13 19:24:16	8a47bb3a1987425ac99f81c7a307a30a22f6200782dec8b3cbf2ce825d322c39	dll		Dridex
2021-10-13 17:22:02	ea6ab3d6415e07cda3ce76402abca648a43b15228b47eae21e54a468df630263	dll		Dridex
2021-10-13 16:16:08	7ab24453e040b90ec8d8389737ca6968a35ec24a28e494b97eb9eb770c90e8b2	dll		Dridex
2021-10-13 15:03:30	7d938aefd1e3971b1b135badfae052ea71a3be5b0b9a74756717702fcc886e1d	dll		Dridex
2021-10-13 14:35:32	631522e561705d7b1e8943b61927aff2be4325cca41ee5458b6180793acb9de0	dll		Dridex
2021-10-13 13:37:05	c72fa2296308b8500ddb8c345035befee0711451d1272df8b6762c608e0cfb82	dll		Dridex
2021-10-13 13:14:47	8a0519ee52a511c3f3184712136569dd8f285646a0bc7eab09bed28bdecf5601	dll		Dridex