URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-09-29 21:54:07	99.83.154.118	a51062ecadbb5a26e.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2021-03-29 14:03:05	216.172.184.154	216-172-184-154.unifiedlayer.com	Not listed	AS19871 NETWORK-SOLUTIONS-HOSTING	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-29 14:03:05	https://omgviralstuff.com/eldxdnl.zip	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-03-30 15:31:35	0c197468076c14f7b6c4fd095009ff628970f2c8d408131f7afd306b5e65eedd	dll		Dridex
2021-03-30 07:14:39	a5b1464925eda8a81b2fcc68e22940c778a91861045537a9bcd1a16af0e511a0	dll		Dridex
2021-03-30 03:18:39	2f95344e5e43861fd9d4d890dd49b7a1401e3d98c7308b5f45702c2c9e45d56a	dll		Dridex
2021-03-29 19:51:48	006e592f760a87219ad92ca26582ac07d3b3e71f9f529396266c310e893e634e	dll		Dridex
2021-03-29 19:09:12	ae3b7d160b7b7389b413ad2cc8787f5b92013627476a1cb2a3371712b07cd28e	dll		Dridex
2021-03-29 18:06:38	1889e4dad95d3e1c99afda0b5f3d39302c869df3abec6af9043732e8adcc05ba	dll		Dridex
2021-03-29 16:09:52	60988ff09b0d229689af66e2045a647d162cc561b52c8eee13db247681b16ea7	dll		Dridex
2021-03-29 15:05:17	97e112177ab77d10b015285637e89cbc4bb9c9260bcc260acc4e6b2ba7759f86	dll		Dridex
2021-03-29 14:03:05	1e553da2063c5773de05bd541cf8a3ec1bdd8d7153003b18b53f2a45c61df6c5	dll		Dridex